ca64929878466ee0682f66d586e531bc7dbe42ea750931adefc03a0308e85c77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca64929878466ee0682f66d586e531bc7dbe42ea750931adefc03a0308e85c77
Size

21KB
MD5

0c199709df200434cdca51da5c86a630
SHA1

0949fa4e6114064d115b9c725901e71813b21e0a
SHA256

ca64929878466ee0682f66d586e531bc7dbe42ea750931adefc03a0308e85c77
SHA512

f1fccebc53924785c8f7acab52255d578dd6a33f9f556b323c5a25d314c063fe7c65fa190a9593980b4bdbe2b24d0703acdde4120eae7af41b75eeb19198d5a1
SSDEEP

384:qGPBBN5oAYd3rYtF8EVXkLlXZzzgp7GMz2IQpyJhqt:qGPwrYt0LlXByd27yJ0

Score

N/A

Malware Config

Signatures

Files

ca64929878466ee0682f66d586e531bc7dbe42ea750931adefc03a0308e85c77
.exe windows x86

1693df5ae28c8734d9836e66c3b90ee5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

MmGetSystemRoutineAddress
KeTickCount
ZwCreateKey
wcslen
ExAllocatePoolWithTag
MmIsNonPagedSystemAddressValid

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 256B - Virtual size: 203B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ