61b8b16340402bac142a9c0ea064cb453b8abf1206d3170b79fd6400e7ac2c38 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61b8b16340402bac142a9c0ea064cb453b8abf1206d3170b79fd6400e7ac2c38
Size

67KB
MD5

3c818fa0f9034e8ba44615ff47fdfbb2
SHA1

448932d9db79974edb952ff42f99a42fdbeb65b3
SHA256

61b8b16340402bac142a9c0ea064cb453b8abf1206d3170b79fd6400e7ac2c38
SHA512

117bbd3df8557eb9f9990261b5e85e60629bcca773eb85f42cc7d76a48107c1d5cfbaf7fa1b67015914c0d5ea1f01cd389bc01204e3af83d1d01411c96a94af6
SSDEEP

1536:ol3B6sA2OyDLYVPdPtrsoi/7c3jK16F1n5RJJW9r:oa5y+bAoi/Y3OQn5V6

Score

N/A

Malware Config

Signatures

Files

61b8b16340402bac142a9c0ea064cb453b8abf1206d3170b79fd6400e7ac2c38
.exe windows x86

d64fcd3d3a3f284e2b9837c36957aa06

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
ExFreePoolWithTag
memset
RtlAppendUnicodeStringToString
RtlCharToInteger
ExAllocatePoolWithTag
RtlGetVersion
KeTickCount
KeBugCheckEx

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 352B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ