ba043d8756c3eb9a12d600af116c5765f9032f92d5acd41139ad8e06f078e056 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba043d8756c3eb9a12d600af116c5765f9032f92d5acd41139ad8e06f078e056
Size

28KB
MD5

077b428e71395185900a4f2b41578da1
SHA1

16b21841bc308036bc626de221be8d5d2539645b
SHA256

ba043d8756c3eb9a12d600af116c5765f9032f92d5acd41139ad8e06f078e056
SHA512

5d1d5444ebd4e9ddd6182a8c85d3deedbb238e7999a0e3b64ec2ccb32ead1d703396459e00f4aa6f80d77a5b83768237799266800befaa54232b927396025e37
SSDEEP

768:JAuM4LllEiwUGaywRqyQt8wlPLqnpCI1soM6fT+9zhAyK72t:6uXEiyLyQt8qwUssoMH9+

Score

N/A

Malware Config

Signatures

Files

ba043d8756c3eb9a12d600af116c5765f9032f92d5acd41139ad8e06f078e056
.exe windows x86

306145479f20a977d3543efa3718c642

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

strncpy
swprintf
ExFreePool
_snprintf
ExAllocatePoolWithTag
RtlInitUnicodeString
ObfDereferenceObject
wcscat
wcscpy
_itow
wcslen
_except_handler3
RtlCopyUnicodeString
_stricmp
RtlAnsiStringToUnicodeString
_strnicmp
IofCompleteRequest
MmGetSystemRoutineAddress
strncmp
ZwClose
ZwOpenKey
_wcsnicmp

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 928B - Virtual size: 910B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ