b95e433d39eb5dda2c1375ae805abb390293f5299eeebd45656c6681c7a62907 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b95e433d39eb5dda2c1375ae805abb390293f5299eeebd45656c6681c7a62907
Size

2KB
MD5

48f17e3a858c35720b2886740c57c519
SHA1

5c9b56558d7a54061a1a135346d8b3198c44a2bc
SHA256

b95e433d39eb5dda2c1375ae805abb390293f5299eeebd45656c6681c7a62907
SHA512

32e318c010ae2195849de9f6c19bbe12c2515d745be14690a4439f19595da3f72ee2542ab87d7c3ee5360a1f7a6f15a56b497736acd6f40a0ed1ff9da6368831

Score

N/A

Malware Config

Signatures

Files

b95e433d39eb5dda2c1375ae805abb390293f5299eeebd45656c6681c7a62907
.exe windows x86

1d17b5dce7426e23f78a97ca85edc9af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
RtlInitUnicodeString
_except_handler3
wcscpy
wcscat
KeWaitForSingleObject
ObReferenceObjectByHandle
ZwSetValueKey
ZwQueryValueKey
ZwEnumerateKey
ZwOpenKey
KeDelayExecutionThread
PsCreateSystemThread

Sections

.text
Size: 896B - Virtual size: 866B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 224B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 352B - Virtual size: 350B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ