b2429a053325ffcc6d37cba75fb9c5ff14d18d2f3719c83b22390890039bc7e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b2429a053325ffcc6d37cba75fb9c5ff14d18d2f3719c83b22390890039bc7e0
Size

28KB
MD5

21422d682eae9388f7ac26501354eb30
SHA1

6efff01de3977438f09846d0611f7724f50a8da4
SHA256

b2429a053325ffcc6d37cba75fb9c5ff14d18d2f3719c83b22390890039bc7e0
SHA512

68ed515f9f7f580a2b614468223929fd0960a84e31f916438ad530536b3f28db6ab4b207df88b5766861046a04a143c55b3ddd5487863249d5e06341babc4bfa
SSDEEP

768:/jtwB8SmOuSMAeZN68h5rUaxqg+kMJpS3VI7e:WfTutAeZN60r5Qg+lqFI7

Score

N/A

Malware Config

Signatures

Files

b2429a053325ffcc6d37cba75fb9c5ff14d18d2f3719c83b22390890039bc7e0
.exe windows x86

0814f1a5270b6eb5603979cd11ae088b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

swprintf
ExFreePool
_snprintf
ExAllocatePoolWithTag
_strnicmp
MmGetSystemRoutineAddress
RtlInitUnicodeString
wcslen
wcscat
wcscpy
_except_handler3
strncmp
RtlCopyUnicodeString
ObfDereferenceObject
_stricmp
strncpy
ZwClose
ZwOpenKey
RtlAnsiStringToUnicodeString
IofCompleteRequest
_wcsnicmp
_itow

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 864B - Virtual size: 838B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ