18752036ecaca13de87b2e8c1a630913f7fe7c48b6a68013aa9a8979de19e80b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18752036ecaca13de87b2e8c1a630913f7fe7c48b6a68013aa9a8979de19e80b
Size

27KB
MD5

09e88a61ebb1aa3f21b8ef5eced1a190
SHA1

9b6cf99fc445d0e59c298c47273f85f3c5f74796
SHA256

18752036ecaca13de87b2e8c1a630913f7fe7c48b6a68013aa9a8979de19e80b
SHA512

3a278e5e54b97136ed508fdc75dcb4c0bc86689bb8e0e72fa50082f85b88a3310884be64879868d68cbf620e8db63143d3ba7253bbcf097c5545b620eca1cb96
SSDEEP

768:NgdBqe1Pqm33MzsV2Q5mSfi2cmv3RDu3TwE9p6kY24:NUBqecmnz1mSa2cmv3MjwE9pT

Score

N/A

Malware Config

Signatures

Files

18752036ecaca13de87b2e8c1a630913f7fe7c48b6a68013aa9a8979de19e80b
.exe windows x86

66d19f4c8487b2e6841d4ba8e432d406

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

strncmp
_stricmp
strncpy
ObfDereferenceObject
swprintf
RtlInitUnicodeString
wcslen
wcscat
wcscpy
_wcsnicmp
_itow
ZwClose
ZwOpenKey
_strnicmp
RtlAnsiStringToUnicodeString
RtlCopyUnicodeString
MmIsAddressValid
ExFreePool
_snprintf
ExAllocatePoolWithTag
IofCompleteRequest
MmGetSystemRoutineAddress
_except_handler3

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 864B - Virtual size: 850B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ