677450adbbc87d8060f72cf862f226d9c570df3b2405be4e3a0ee620a634fe21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

677450adbbc87d8060f72cf862f226d9c570df3b2405be4e3a0ee620a634fe21
Size

35KB
MD5

5101cf304dc82de1ebf7ea4e348e4454
SHA1

66849af96e41b3f51bb476b4aca42ad372032146
SHA256

677450adbbc87d8060f72cf862f226d9c570df3b2405be4e3a0ee620a634fe21
SHA512

6e0addcffbf1060e8c0e652ee8bfe550e22171bb0c08508e23815d5798612c6fa2629177cd6cf29b8f16f7ad449b51a53e63899a33759719256e398200c6cb5b
SSDEEP

768:zPPgJ4OGejN9vsay/RTQ2USoA0uJ3/sDK8SEL1S9Vg:Ri7saSW2USoA0uJ300EL1a

Score

N/A

Malware Config

Signatures

Files

677450adbbc87d8060f72cf862f226d9c570df3b2405be4e3a0ee620a634fe21
.dll windows x86

f247f6bc0329fe1db23a86331a27620e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

SeDeassignSecurity
RtlSecondsSince1980ToTime
KeInitializeMutex
RtlUpcaseUnicodeChar
ZwQuerySymbolicLinkObject
RtlCharToInteger
ZwCreateDirectoryObject
strcmp
RtlCompareUnicodeString
RtlInitUnicodeString
KeInitializeSemaphore
RtlValidSid
RtlEqualString
RtlCompareString
RtlEqualUnicodeString
MmProbeAndLockPages
RtlInitString
IoRequestDeviceEject
RtlInitAnsiString

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ