71f71022252aee8d7d210fc297f7777fe6e8696d21cf223eaa570e0b349d62dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71f71022252aee8d7d210fc297f7777fe6e8696d21cf223eaa570e0b349d62dc
Size

28KB
MD5

969ed5e14bad6d9a040dcabd1d9ae4d8
SHA1

c0f3449d926296d9f62881d4411f550500666b9c
SHA256

71f71022252aee8d7d210fc297f7777fe6e8696d21cf223eaa570e0b349d62dc
SHA512

7996fa46f9fef2d91a86bc248b0472b8ea7a059054e8d320869bdae0fdd43ac3c07cd02f34c633d0a19466dcf5786800771e8f0b6f4b399e2f9545933f3f8bf8
SSDEEP

768:INzY15gF6hGa2rdBp9GcjcV2b5qZ7HX70K9VkR:vDK69W9/jcV2YZ7r0KQ

Score

N/A

Malware Config

Signatures

Files

71f71022252aee8d7d210fc297f7777fe6e8696d21cf223eaa570e0b349d62dc
.exe windows x86

195a0d08b6f63193b3e911067d92b63a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

MmGetSystemRoutineAddress
RtlInitUnicodeString
strncmp
_strnicmp
swprintf
wcslen
wcscat
wcscpy
_except_handler3
RtlCopyUnicodeString
ExFreePool
_snprintf
ExAllocatePoolWithTag
strncpy
_stricmp
ObfDereferenceObject
ZwClose
ZwOpenKey
IofCompleteRequest
_wcsnicmp
RtlAnsiStringToUnicodeString
_itow

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 832B - Virtual size: 826B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ