2d9095aacca8f41d51210df0b2181e213453306494196a335b7a6b78f7487773 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d9095aacca8f41d51210df0b2181e213453306494196a335b7a6b78f7487773
Size

67KB
MD5

0f8c11e52b17caacba620ae15b806747
SHA1

2ef2ee395a0090fc0d01c325fad097f3548aed10
SHA256

2d9095aacca8f41d51210df0b2181e213453306494196a335b7a6b78f7487773
SHA512

d8fd1b47c3143fcf6cca6156c9b4cc78137dd5b853ef6f9eca3ec83f108f0ebbd472c92886e3c94a6f58e3a7cc02598c9e20d7cd2c4dcc55aaced01068e0f331
SSDEEP

1536:EfzkPly3T6T87EbehFpi6sGRDXQlZoWjYN+JFLSY1uIhBVDCWPi340ZFUi:GksTS8IbUa6s0ET+H40bN

Score

N/A

Malware Config

Signatures

Files

2d9095aacca8f41d51210df0b2181e213453306494196a335b7a6b78f7487773
.exe windows x86

12135d85d2a1a15b15f7f07e918bcf54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlHashUnicodeString
RtlInitUnicodeString
ExFreePoolWithTag
RtlFindMostSignificantBit
memset
ExAllocatePoolWithTag
RtlCharToInteger
RtlGetVersion
ZwDeleteKey
IoFreeIrp
IoAllocateIrp
KeTickCount
KeBugCheckEx

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ