6341446d986389527f801962758eb8023e37d53b22aa9412cdf1b610a9b2f957 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6341446d986389527f801962758eb8023e37d53b22aa9412cdf1b610a9b2f957
Size

28KB
MD5

0e98bb759d8de83223eddf0e2e0e42b0
SHA1

b72dc9fefbb7e498512e59744a8d5ec9ed6e019b
SHA256

6341446d986389527f801962758eb8023e37d53b22aa9412cdf1b610a9b2f957
SHA512

641b4a9215f74742ece343164fcdb4c9e8cd3b9352b2ffa12261e034c363bd1e65388f25adf177e66e2b201dfd964eaec6b119914cf2c6115e3f2d1cbfb61a15
SSDEEP

768:Z7m/ZKl2Nk0RuKXGkwgJ1BUS2HFZt/HFwp8lmz+kVUw:FUH78KrwgJ1BkHF3/HFwGfkVU

Score

N/A

Malware Config

Signatures

Files

6341446d986389527f801962758eb8023e37d53b22aa9412cdf1b610a9b2f957
.exe windows x86

587f21cd967dcd0c16f278be7ca136dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlCopyUnicodeString
RtlInitUnicodeString
wcslen
wcscat
wcscpy
_except_handler3
strncmp
_itow
ObfDereferenceObject
ExFreePool
_snprintf
ExAllocatePoolWithTag
_strnicmp
_stricmp
strncpy
IofCompleteRequest
RtlAnsiStringToUnicodeString
swprintf
_wcsnicmp
MmGetSystemRoutineAddress
ZwClose
ZwOpenKey

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 886B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ