65386ff0e696d8a42ca5d405fa24f5ff2b69e47232bd67693db8698e313cc949 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65386ff0e696d8a42ca5d405fa24f5ff2b69e47232bd67693db8698e313cc949
Size

70KB
MD5

0377f83cd5607fec792d52a910d2019f
SHA1

91aaf5aabb9cb334c32e052099973fc2f782280d
SHA256

65386ff0e696d8a42ca5d405fa24f5ff2b69e47232bd67693db8698e313cc949
SHA512

00136471f4cbaf2e3c292048b1bb13274ecc7c56291be7253bbe6760d993ba9f49042394022c5639ec738ad4519f05f28a282f8b2deb88ffd3ec130cc6f048a3
SSDEEP

1536:VEJE1kRD2KNHCpGM7A8y0DEt+O+YEO1ByaQ/r:Vd1kvNEK0tX5OXya

Score

N/A

Malware Config

Signatures

Files

65386ff0e696d8a42ca5d405fa24f5ff2b69e47232bd67693db8698e313cc949
.exe windows x86

4b83aae50e2e67d5014be126a21c1cc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoGetDiskDeviceObject
IoFreeIrp
InterlockedExchangeAdd
PsReturnPoolQuota
ExAllocatePoolWithTagPriority
PsChargeProcessPoolQuota
RtlCopyUnicodeString
RtlCompareUnicodeString
MmResetDriverPaging

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ