b60a67c0f122a064465c29d745fc2f9c96479a812f94b7d9055304d1575a5b4e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b60a67c0f122a064465c29d745fc2f9c96479a812f94b7d9055304d1575a5b4e
Size

28KB
MD5

449ba13a3d5c9b51fe3d1dd2f9f81022
SHA1

aa7e497bd43511abfd24befb3838118f0ae3c7a4
SHA256

b60a67c0f122a064465c29d745fc2f9c96479a812f94b7d9055304d1575a5b4e
SHA512

cbaef15419b061bd7e8a5c1e786c88670d46e0463f3e7dcd68236c823772b611aa1df18f729c653c6fd97519c8855c1cdfcb364b38e28284afa7e7e72547ff6a
SSDEEP

768:j/pbVkyUIkYXAEDvxn1bWdwjXB87OqnUGP8DE6KLs:jxkYXAEDvxMdm8jPP7Rs

Score

N/A

Malware Config

Signatures

Files

b60a67c0f122a064465c29d745fc2f9c96479a812f94b7d9055304d1575a5b4e
.exe windows x86

4cb80f8092cd7b7b460a08184de161b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

strncpy
swprintf
_strnicmp
ExFreePool
_snprintf
ExAllocatePoolWithTag
_wcsnicmp
wcslen
ZwClose
ZwOpenKey
ObfDereferenceObject
MmGetSystemRoutineAddress
RtlInitUnicodeString
RtlCopyUnicodeString
wcscat
wcscpy
_stricmp
strncmp
RtlAnsiStringToUnicodeString
IofCompleteRequest
_itow
_except_handler3

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 866B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ