a312801f1e7f06c167d55ef45a6b32dbeb04e3f62ce60baa6fc727f7fb882362 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a312801f1e7f06c167d55ef45a6b32dbeb04e3f62ce60baa6fc727f7fb882362
Size

28KB
MD5

06346d779f87ed2e91e5086c82c9f2d7
SHA1

3e7858c3f576dd595d8338b91c8b8336357d25d2
SHA256

a312801f1e7f06c167d55ef45a6b32dbeb04e3f62ce60baa6fc727f7fb882362
SHA512

cdaf4fb35f79de0c2c80364286d26a143830507c10a78b66b94420ff3bb789f407de061a7170d371a6a15f09701e7923e1520e982e27bdc24b0b345202684de8
SSDEEP

768:vdJXpDKDYW0lBWUi2tYtHfiK/7BYEH4cH5GZ9TH:vdxp0p0HWH26HKOPYm5gj

Score

N/A

Malware Config

Signatures

Files

a312801f1e7f06c167d55ef45a6b32dbeb04e3f62ce60baa6fc727f7fb882362
.exe windows x86

e5b4661773a042a02cd25618f7b42346

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
RtlInitUnicodeString
ZwOpenKey
wcslen
wcscat
wcscpy
ExFreePool
_snprintf
ExAllocatePoolWithTag
strncmp
ObfDereferenceObject
swprintf
_strnicmp
_stricmp
strncpy
RtlAnsiStringToUnicodeString
_wcsnicmp
MmGetSystemRoutineAddress
RtlCopyUnicodeString

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 800B - Virtual size: 776B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 832B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ