6826d875a0ef9ae9bf012098a7fc2e5cf2c96f371777692486640f433475f6c1_unpacked | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6826d875a0ef9ae9bf012098a7fc2e5cf2c96f371777692486640f433475f6c1_unpacked
Size

427KB
MD5

ea286abde0cbbf414b078400b1295d1c
SHA1

81ec6372b8668576bccd9307ff578ff596f3df7f
SHA256

a04d629d2052bf1004efb82a879e3b28b4a42045c987d5951ff037c77eb4e08d
SHA512

d5449d8bb77591007676e44f8fb86c7f1750a8098de115599b3f41f91edf6df2b44aed76204f7cf97b278c81ddf24806995086993f2ff783dd8606a56b941fdc
SSDEEP

6144:cc8ydn6WhGGKJ3nZkGe0l4erRmFh+tqyeW/FntFYH3NL1GuoBW5D7yP:cc1dnWl3WPPFhnfkYd2BW5

Score

N/A

Malware Config

Signatures

Files

6826d875a0ef9ae9bf012098a7fc2e5cf2c96f371777692486640f433475f6c1_unpacked
.exe windows x86

6b26347f95ddac1435121df757a1e757

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoBuildPartialMdl
IoCreateDevice
KeQuerySystemTime
KeReleaseMutex
KeWaitForSingleObject
IoAllocateMdl
KeTickCount
KeWaitForMultipleObjects
KeInitializeSemaphore
ZwClose
IoDeleteDevice
ZwQuerySystemInformation
IoFreeMdl
ZwQueryValueKey
ZwOpenKey
KeInitializeMutex

Sections

.text
Size: 395KB - Virtual size: 395KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ