2819e859d5b4d2c401fc9fbf742cafad0e45fdb7722ee103441b61922cfce8bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2819e859d5b4d2c401fc9fbf742cafad0e45fdb7722ee103441b61922cfce8bd
Size

14KB
MD5

82c16a250930667620031771d354e630
SHA1

da8941b0eae924a7ba83cb1dead8b2f92f9459e1
SHA256

2819e859d5b4d2c401fc9fbf742cafad0e45fdb7722ee103441b61922cfce8bd
SHA512

51c6d12b546fe525e21a3455c6cc1bcf80b0e5629591e9b9cce8b954c86a582ac3a51922c10dd1b44316260c71e577435c392046fced875dd94713bf78820de3
SSDEEP

96:jeCo7dWzY2z7DTkGVRyWnH4uLpqozh9LgvFebI/HjN6qF4YL1UqpLXfoqbE:sdWXP3peSHZN9LgvFHx6qeY9BwqbE

Score

N/A

Malware Config

Signatures

Files

2819e859d5b4d2c401fc9fbf742cafad0e45fdb7722ee103441b61922cfce8bd
.exe windows x86

ee06518f6fdf76ddee9bf1f4704106b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoFreeMdl
MmUnmapLockedPages
ZwMapViewOfSection
PsGetVersion
sprintf
tolower
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmProbeAndLockPages
IoAllocateMdl
ObfDereferenceObject
ZwAllocateVirtualMemory
RtlInitUnicodeString
ObReferenceObjectByHandle
MmSectionObjectType
ZwPulseEvent
MmMapLockedPages
MmBuildMdlForNonPagedPool
MmCreateMdl
KeServiceDescriptorTable
_except_handler3

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 640B - Virtual size: 570B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 384B - Virtual size: 318B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ