d9659a557c1a5809019d9555ed2695c34848d560c3b819737fdfb731e7172c20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9659a557c1a5809019d9555ed2695c34848d560c3b819737fdfb731e7172c20
Size

29KB
MD5

83244aeaaddb34400b1ed511f36cd1ef
SHA1

810740094969c8438af5805dc863eb22795b6235
SHA256

d9659a557c1a5809019d9555ed2695c34848d560c3b819737fdfb731e7172c20
SHA512

e1a48f772970fe2eaa629991d4a86e947077da206fc3c1bf0c4c4bee6e5e216a5554142fc7b9bf65912191b07d84193c7d9cfb5bc4d9a3d2b6ab6938d0718eb8
SSDEEP

384:GftkKY5UNToycLHjlMsiFms8VHIiBP63FfT/jVhl46wRAIXsDpOqp4JujutQZovG:ytlNsyij2si8Ii6fT/5kAEOtnjutubou

Score

N/A

Malware Config

Signatures

Files

d9659a557c1a5809019d9555ed2695c34848d560c3b819737fdfb731e7172c20
.exe windows x86

caed740047327835987440169debea21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

PsGetCurrentProcessId

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 96B - Virtual size: 86B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ