e7e60428f6e44cef37d2a73b56a7bf9018c7805a725498c986fcc6067e8f36f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e7e60428f6e44cef37d2a73b56a7bf9018c7805a725498c986fcc6067e8f36f5
Size

464KB
MD5

a00c55249dc731c1ba2ba5d57d8c57f0
SHA1

51838e1df82a3942382a8823be7c242c2007b915
SHA256

e7e60428f6e44cef37d2a73b56a7bf9018c7805a725498c986fcc6067e8f36f5
SHA512

decbdafc503145e729320dbfd4ede9ac7d4f754838fda463a4f4c16582500d87e3374d6b90ffb14a9dc633895c1226e854358d3cd668def87aa4ba3a9e87cea3
SSDEEP

6144:S38KQlpRdcD1aOoCstmeE2WxGdQeH828pjqsc/BRkjqT3eeNn3Bulz3gARt:S387hmaHmDjG5H828pqx3eQ3+z33

Score

N/A

Malware Config

Signatures

Files

e7e60428f6e44cef37d2a73b56a7bf9018c7805a725498c986fcc6067e8f36f5
.exe windows x86

115aefaf60f3a221c40bc80bd9c67b4f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwQueryValueKey
KeInitializeMutex
KeWaitForSingleObject
KeTickCount
ZwQuerySystemInformation
ZwClose
IoBuildPartialMdl
KeQuerySystemTime
KeWaitForMultipleObjects
IoFreeMdl
IoAllocateMdl
ZwOpenKey
IoDeleteDevice
KeInitializeSemaphore
KeReleaseMutex
IoCreateDevice

Sections

.text
Size: 430KB - Virtual size: 429KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ