1c592c448f8213ddd61bbd209295304cc21149edb22c259e94edc33a522f083c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c592c448f8213ddd61bbd209295304cc21149edb22c259e94edc33a522f083c
Size

24KB
MD5

81ea7f74ce4536ee3b19e6131d28f9f0
SHA1

459adc4380d887d2af8d7fc77e5daf4d68a774e0
SHA256

1c592c448f8213ddd61bbd209295304cc21149edb22c259e94edc33a522f083c
SHA512

c2941ac9b56681a6b3d9a1587221a918b7af046235b2b9984696ef937ea2b315c2cb26f76a1d8ba541afda2a42f3ca2e7ee92462b6b2ee2557622667ad82a07d
SSDEEP

384:bafqTw3i3DeIwn9gbubcO+JuT0RLEK5nUy1abT0Fw1VSGHQ/oB2:Qq8uDen2bugO2YK5Uy1ab4Fw1VSG4oA

Score

N/A

Malware Config

Signatures

Files

1c592c448f8213ddd61bbd209295304cc21149edb22c259e94edc33a522f083c
.exe windows x86

b6839275f272f810af1b79163247a089

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

NlsMbCodePageTag
IoAttachDevice
RtlReserveChunk
CcZeroData
ZwLoadKey
ExFreeToPagedLookasideList
KeQuerySystemTime
MmCanFileBeTruncated
KeSetEvent
ZwDeleteFile
KeI386ReleaseGdtSelectors
ZwCreateSymbolicLinkObject
NtConnectPort
IofCallDriver

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ