961894c0b7d832ad3a9b9463eebdfc6a169e6f783fd978d1c2bee1cd09fdcf94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

961894c0b7d832ad3a9b9463eebdfc6a169e6f783fd978d1c2bee1cd09fdcf94
Size

40KB
MD5

52ad43ca896385f63859e0d959371f58
SHA1

c5273a954784f808bebb093ac949e396c3cb0fe5
SHA256

961894c0b7d832ad3a9b9463eebdfc6a169e6f783fd978d1c2bee1cd09fdcf94
SHA512

08c6579726176a398bc486950add5044b218a23e030f612aec07108cba89f279aa47bb9f9ff5d22b1458f245d01a3ef57696890b45b56fa275c480a49a79affd
SSDEEP

768:51H3ydw+LJX9yqHnV88rx2dU3s68vqTKctPzQJSzbqV:51H3yWwJQKp3sjqTttM4m

Score

N/A

Malware Config

Signatures

Files

961894c0b7d832ad3a9b9463eebdfc6a169e6f783fd978d1c2bee1cd09fdcf94
.exe windows x86

b0bd9c6c5d443fe604a7ffe9b10dedda

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
PsProcessType
PsThreadType
KeTickCount
ZwFlushKey

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 256B - Virtual size: 242B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ