1db5a9a1a5003aa66dd7f79c0a3f788c6f4cfbe4c8a21282acc4abd2a641f785 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1db5a9a1a5003aa66dd7f79c0a3f788c6f4cfbe4c8a21282acc4abd2a641f785
Size

67KB
MD5

7c69680eb0b99a6219090b973d304b80
SHA1

119ace621098482cf689de441263e92ed4971b4a
SHA256

1db5a9a1a5003aa66dd7f79c0a3f788c6f4cfbe4c8a21282acc4abd2a641f785
SHA512

cfd95038ddeb3b42bf9eb9c9b9c5bad555a075bbd7839df7240b26a1a58a036cfebdeb6bf615222698a6a838df374cf505246eb6cf20585643a187c77525df03
SSDEEP

768:/XioFVh3oMLrb5nK+2Krls2NDrKkz9W0z5g21ziUMdOyGzVjNUMuMIR+7S/LDqA:fiO3HNK+5Rs2ND+kPX1ziUA6z/axnr

Score

N/A

Malware Config

Signatures

Files

1db5a9a1a5003aa66dd7f79c0a3f788c6f4cfbe4c8a21282acc4abd2a641f785
.exe windows x86

38e73be1fdad98d9cf9a80eff5fe4f04

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
ExAllocatePoolWithTag
RtlCharToInteger
memset
ExFreePoolWithTag
RtlAppendUnicodeStringToString
RtlGetVersion
KeTickCount
KeBugCheckEx

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 352B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ