6919f0d102c8ecc38cd760e6aeadf4238af7cdb4ef3cdc0e365ea3241dc15619 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6919f0d102c8ecc38cd760e6aeadf4238af7cdb4ef3cdc0e365ea3241dc15619
Size

16KB
MD5

003af5d31684ec43420837963d9869a0
SHA1

d8b4e8f7b48e2fcb8e0ef4bccd21a4993d361148
SHA256

6919f0d102c8ecc38cd760e6aeadf4238af7cdb4ef3cdc0e365ea3241dc15619
SHA512

cbc8e93fd366e009b1b5934e152af06833e50bb8ff3079b8afa0c5bb9e747f1e52826e5c0877c8decb272bc78c8ac97526cf09416d449c29d7c8d219ca6f12bf
SSDEEP

384:ph+b9Bb+WFj4+C9SUCPDUS42KKP7uMPsxWog0xJYrRw:/0riG8+2zM/dtzLk4tEJYrR

Score

N/A

Malware Config

Signatures

Files

6919f0d102c8ecc38cd760e6aeadf4238af7cdb4ef3cdc0e365ea3241dc15619
.exe windows x86

6efe84eb3feb20e22ad5e9613b0542a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwSetValueKey
wcslen
ZwOpenKey
RtlInitUnicodeString
ZwReadFile
ZwQueryInformationFile
ZwCreateFile

Sections

.text
Size: 896B - Virtual size: 860B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 896B - Virtual size: 854B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ