4bc8b3f2bed97b416dcbf619c1713a73c48c84e3a87d3550141085bfb5951e11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bc8b3f2bed97b416dcbf619c1713a73c48c84e3a87d3550141085bfb5951e11
Size

21KB
MD5

0c849a0e8f6e06ad3bb6c0be450af5de
SHA1

25bf060abe7eda13b0b4cb193d11b27ee7259fdf
SHA256

4bc8b3f2bed97b416dcbf619c1713a73c48c84e3a87d3550141085bfb5951e11
SHA512

fa9093641763065350716068fadd281a03f3cc8e6d9fe140cdd521e0bfd8941892d582629cbe9a9e82c0d99248355e11d1cfe5131d89d4618e9f2641202badb4
SSDEEP

192:r49xIX7b6ckUZ7eih0BVn80bkFjlCK5XapVbl6zDp0xVKrKntWfdpvh0CPnAbHWz:xZbSS0bkPCfpV5xsKntWXhN4zW5+

Score

N/A

Malware Config

Signatures

Files

4bc8b3f2bed97b416dcbf619c1713a73c48c84e3a87d3550141085bfb5951e11
.exe windows x86

7ef8a8cac7fcacf1a9cf4bb532fd5ead

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlAnsiStringToUnicodeString
RtlInitAnsiString
RtlValidRelativeSecurityDescriptor
MmGetSystemRoutineAddress
RtlEqualSid
ExAllocatePoolWithTag

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 256B - Virtual size: 235B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ