71b90088fb686de91f66751b871339db450faaf48d8166a9c76ea3e5779d22c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71b90088fb686de91f66751b871339db450faaf48d8166a9c76ea3e5779d22c1
Size

4KB
MD5

7b560e4096d610c1105dd26657ea2fad
SHA1

583bfa2cefd8b4104e91b25cd9c7442599917dfd
SHA256

71b90088fb686de91f66751b871339db450faaf48d8166a9c76ea3e5779d22c1
SHA512

5e69c640bfcb2d4d63292e0d78df765f92b9afc4f17106126b41fa111de7ecefd695d3d06f89cde7466db79e9d2345f1a78562475f271ab5008863b4445322e1
SSDEEP

48:I1rKBibzA2/tokvOraZS22hzFZMwRZbdHL4l5oAh8Ma7/G7RoYwqcfqPqPW352+g:bwTvw/MYLqVaj6Pcyi62WyQm

Score

N/A

Malware Config

Signatures

Files

71b90088fb686de91f66751b871339db450faaf48d8166a9c76ea3e5779d22c1
.exe windows x86

9083d860012824450b2c94f76807bb33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlAppendUnicodeToString
RtlInitUnicodeString
ExFreePoolWithTag
wcslen
memmove
ExAllocatePoolWithTag
RtlCompareUnicodeString
_except_handler3
KeTickCount
KeBugCheckEx

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 768B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 366B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 234B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ