bb9615cc57c6bdf67578fd1e33bcadd8e0a014c340985caef4739464cf5937ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb9615cc57c6bdf67578fd1e33bcadd8e0a014c340985caef4739464cf5937ab
Size

21KB
MD5

56c78e8480094ddec0aa2ddac13f76df
SHA1

0b55ee50f2d2605d09f042b974cb7e0adc115d75
SHA256

bb9615cc57c6bdf67578fd1e33bcadd8e0a014c340985caef4739464cf5937ab
SHA512

0101fc37a2cfcc2390470bae2a050a5b3ae1d56eb0f0446f6b6a1e86e617e463e7713b4ef42f98cc797b1b962d7540833febec7e0a5b822f160fc8afa4739bb4
SSDEEP

384:5OffmI8ZWejaK3syUgmGCERgz5P9y3ylYeqhbJXNs+HPJfpWMM:5QvYp33mG6zp9XGlsU8

Score

N/A

Malware Config

Signatures

Files

bb9615cc57c6bdf67578fd1e33bcadd8e0a014c340985caef4739464cf5937ab
.exe windows x86

68f5858c4a99d5423bf4502b16889bdb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
KeClearEvent
ExAllocatePool
MmGetSystemRoutineAddress
ExAllocatePoolWithTag
MmIsNonPagedSystemAddressValid

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 256B - Virtual size: 221B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ