bdd292718d1b475cf1955f0bcac6235556f232ba403e62c87e0ec5f929ba5d5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bdd292718d1b475cf1955f0bcac6235556f232ba403e62c87e0ec5f929ba5d5d
Size

27KB
MD5

0aad4e08b940e4623bca6338203ad94c
SHA1

22b8585af901e0200041494d5c88da6413c1d9d3
SHA256

bdd292718d1b475cf1955f0bcac6235556f232ba403e62c87e0ec5f929ba5d5d
SHA512

bc5734adc94ba41a63ccc8955885b605c1fcbdfc374e4d29126abc9431dc67e9376561ffc1fc8c3d1ef19db08020249306989c02fb22d88076c18e34e77f21fc
SSDEEP

768:wyMbeKc3FNccmz4jPqjGRSzy42y8Ckm3lUoJDCTlCS:wyMbbmccmk7qyRS24ekUoJ2J

Score

N/A

Malware Config

Signatures

Files

bdd292718d1b475cf1955f0bcac6235556f232ba403e62c87e0ec5f929ba5d5d
.exe windows x86

6531ca88e4f5fff745c80b1c54a46e8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

strncmp
RtlInitUnicodeString
ObfDereferenceObject
swprintf
ZwClose
ZwOpenKey
wcslen
_strnicmp
_stricmp
strncpy
_wcsnicmp
wcscat
wcscpy
RtlCopyUnicodeString
IofCompleteRequest
RtlAnsiStringToUnicodeString
ExFreePool
_snprintf
ExAllocatePoolWithTag
MmGetSystemRoutineAddress

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 832B - Virtual size: 818B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ