a1b26909e73078cb34b76a0e2ca652f42d34cdd8d7609c02ff54d41b4ee6f048 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1b26909e73078cb34b76a0e2ca652f42d34cdd8d7609c02ff54d41b4ee6f048
Size

82KB
MD5

835bb2a72b8a7afb55bd7d7fef9079ea
SHA1

967badc0b98a903866f3266e3f2410f5b58ec426
SHA256

a1b26909e73078cb34b76a0e2ca652f42d34cdd8d7609c02ff54d41b4ee6f048
SHA512

f30f412c5042c889071979b512b41c9762064f4ec08077a2d0fc2cd5c8d7432b7e62b5a2d36da6b598d439fe496f03f1451574cebcf47d7cb7d382da2df36590
SSDEEP

1536:k8FttR+6jGcca3XuSZlY9lc1L0c5YnPGhkxG2wWwtoZM+OMYX:k8Fttg6jTFXuiqlc1g0iuh1NYM+O7

Score

N/A

Malware Config

Signatures

Files

a1b26909e73078cb34b76a0e2ca652f42d34cdd8d7609c02ff54d41b4ee6f048
.exe windows x86

083b2fda79bfff27730cc9cc50f8ecd5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtTerminateProcess
NtRaiseHardError
NtTerminateThread
RtlUnwind
NtQueryVirtualMemory
RtlSetProcessIsCritical
NtSetInformationProcess
DbgBreakPoint
RtlAllocateHeap
RtlUnicodeStringToAnsiString
RtlNormalizeProcessParams

csrsrv

CsrServerInitialization

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE