77e8137609ad13ce068e80a37b1dc331f5d2db1fec81acf533063ced65d79898 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77e8137609ad13ce068e80a37b1dc331f5d2db1fec81acf533063ced65d79898
Size

29KB
MD5

d54a96e001d375fb84f1afba42d13e7c
SHA1

759a2e2ebbab7a9b53ce23b392a39cc0164f108e
SHA256

77e8137609ad13ce068e80a37b1dc331f5d2db1fec81acf533063ced65d79898
SHA512

a3b490e407254b100a9cb114c8ff0b8b26c106a2e79ef643f0825284183d47ff2f1b9c111d4236229c4bf4e697df3e9d39f82cdc83de89f5cf7f60e39e8b0f77
SSDEEP

768:EuHRZpHcLu7zj1cRu55YS81VEob6xPiiJP6TX7XMsiDlxiJHZBkxL:Eux57z2u55YS81VLuhiisTXLtBML

Score

N/A

Malware Config

Signatures

Files

77e8137609ad13ce068e80a37b1dc331f5d2db1fec81acf533063ced65d79898
.exe windows x86

d516a30663b60b8f89dcaaba99ed6b9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
_wcsnicmp
wcslen
strncmp
strncpy
RtlAnsiStringToUnicodeString
_stricmp
ExFreePool
_snprintf
ExAllocatePoolWithTag
ObfDereferenceObject
ZwClose
ZwOpenKey
wcscat
wcscpy
RtlCopyUnicodeString
_strnicmp
swprintf
MmGetSystemRoutineAddress

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 800B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 832B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ