0cbd5cf811fde99e932118c2d6a8173149c5def9dd380fb1cda6a822f673a0db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0cbd5cf811fde99e932118c2d6a8173149c5def9dd380fb1cda6a822f673a0db
Size

28KB
MD5

2d4bf0881eb80a6b8439d20e8eb4e6ab
SHA1

e0ae5d53db9a066c8aec979f61d5525b3b091b91
SHA256

0cbd5cf811fde99e932118c2d6a8173149c5def9dd380fb1cda6a822f673a0db
SHA512

a3bcdd4a73f605ff31f0b081cd73ce1ff284f022404075b079e54b646df80228e40d515fa041d4bca67657b40a775d348c3b9b0a4aa54d1dc3fd7a4d68bbe6e2
SSDEEP

768:H+sHKv1yVH8ig8WYGVVRCn+uAzzPbVRL4ZyptwF:H+sHKyFgZVRNuAzzjVRLvpO

Score

N/A

Malware Config

Signatures

Files

0cbd5cf811fde99e932118c2d6a8173149c5def9dd380fb1cda6a822f673a0db
.exe windows x86

32d91ea47f4ad9e13bdb1c0237f7980c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
swprintf
_strnicmp
RtlCopyUnicodeString
wcslen
wcscat
wcscpy
strncpy
_itow
_stricmp
ObfDereferenceObject
IofCompleteRequest
ExFreePool
_snprintf
ExAllocatePoolWithTag
_wcsnicmp
ZwClose
ZwOpenKey
RtlAnsiStringToUnicodeString
strncmp
_except_handler3
MmGetSystemRoutineAddress

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 864B - Virtual size: 858B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ