408152970a97077529525bcc8bd28d5e93b3d75ef3ae1410bb119c714f5b3507 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

408152970a97077529525bcc8bd28d5e93b3d75ef3ae1410bb119c714f5b3507
Size

55KB
MD5

93457a30301c56244bae3d85425a24c0
SHA1

ebb0d92f45299d2fc65030d508c49e28b56d3fc5
SHA256

408152970a97077529525bcc8bd28d5e93b3d75ef3ae1410bb119c714f5b3507
SHA512

379416ee55ea035a79a1b734cc09a8d84c24cdb1a7a8aa2b26e7a3ea365a32ee82e7f90be9cf26a89fdc6966cf125c4bab3f3bc9fdbb1a9fc3433b3f7f354a05
SSDEEP

768:ecXyt0pwc/1jUPNV1AYwCbBGtu0BBl8DBjqQsrQy7boLSWw+hrcI:ewyt02ctjUzwCbBGtLB8Bjd5y7ZWwr

Score

N/A

Malware Config

Signatures

Files

408152970a97077529525bcc8bd28d5e93b3d75ef3ae1410bb119c714f5b3507
.exe windows x86

f2207f451b765839c29fbb466e1e6dd4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_stricmp
ZwClose
strcpy

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.unc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE