428ffa873fba74fb7cf483e335278c8cc657f89440a7299f0c5899088d7726fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

428ffa873fba74fb7cf483e335278c8cc657f89440a7299f0c5899088d7726fe
Size

4KB
MD5

4b6909fa56cc0b7bbf22a7878e7d180f
SHA1

4c1c42095b74f311e8db8ff9be1d3b0c8161c2eb
SHA256

428ffa873fba74fb7cf483e335278c8cc657f89440a7299f0c5899088d7726fe
SHA512

d795846f8d1f87eb929a71e41d2243a6899ba9c00529c5a78d1d9b6c8c7130449b2315d0804bf0b15997a8b62c20032d17a83c8a9cb5155fc2eba5bce9356ffb
SSDEEP

48:yRqReuku0YTPvf36iREUqz4ZM7q2Hrt+DS8nVTfcD1Hzp1L9A26CdZ1Dwit/:SEjntTPqYEzkS7q2HrEeBDFLL9A2dvP1

Score

N/A

Malware Config

Signatures

Files

428ffa873fba74fb7cf483e335278c8cc657f89440a7299f0c5899088d7726fe
.exe windows x86

7c51bc1d97c12ae96cbbc3da1db2d2d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwReadFile
ZwQuerySystemInformation
ZwQueryInformationFile
ZwCreateFile
ZwClose
RtlInitUnicodeString
ExFreePool
ExAllocatePool
KeServiceDescriptorTable

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 288B - Virtual size: 272B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ