3ebb5555adfbbf8acc140d9e6e1a8020cdbc3c4ac9b5c46aed8c27ad53b69078 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ebb5555adfbbf8acc140d9e6e1a8020cdbc3c4ac9b5c46aed8c27ad53b69078
Size

81KB
MD5

0d9eb5b4ca03c2b74ea22454b9ca5bea
SHA1

f1512d2d9b2262659b93a794cf4717501adb72a3
SHA256

3ebb5555adfbbf8acc140d9e6e1a8020cdbc3c4ac9b5c46aed8c27ad53b69078
SHA512

7cb229ed936bfb56947b0074ebab1404858bcd8b4959c79072bbc02f493149f7780a8eb3a4baf03f686f92c4573c8100c2f3beeaa528968eaecea26af8d2782f
SSDEEP

1536:vbKtC3QWCV2xbNJDdX53Ywr4jdpM+ZLceK0kb+NGQB3Z+qYUbEREXjt:vuIg8xzDdX53Y5jdNLcexkCNGWwqYUoC

Score

N/A

Malware Config

Signatures

Files

3ebb5555adfbbf8acc140d9e6e1a8020cdbc3c4ac9b5c46aed8c27ad53b69078
.exe windows x86

e741f532f6bfe10d59b857a5e588418e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExInitializeZone
RtlAppendUnicodeToString
InterlockedExchangeAdd
RtlEqualUnicodeString
RtlCompareMemory
KeQuerySystemTime
IoWMIWriteEvent

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ