aa199abafd941b747e2228cae13b9246fcef8b2c72d5168594cf9858a1f6e41c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa199abafd941b747e2228cae13b9246fcef8b2c72d5168594cf9858a1f6e41c
Size

47KB
MD5

b7d6090d2ae74cce7e81d520514e201c
SHA1

3f356792c7550cfe217ddf9d1429da74ac3858a0
SHA256

aa199abafd941b747e2228cae13b9246fcef8b2c72d5168594cf9858a1f6e41c
SHA512

f58a9737ff66496ff23c188c7f61c840385e89bfa01d5a6c17b4b70a6d124354c3502c381f01739114af1a900e16904b0c05e7db4efb74b3a83e19c78b8e23d1
SSDEEP

768:EX+wbSleawpU7/3RCdlAzyn/hFeB0CQw612vp8DJ8Q+Myt0owHX6iDPChU:EXLbmeawoBCD1nuBiw612vWDJ8Q0m36w

Score

N/A

Malware Config

Signatures

Files

aa199abafd941b747e2228cae13b9246fcef8b2c72d5168594cf9858a1f6e41c
.exe windows x86

e18c1c323a431e0d52ecd36411b8ea5e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

memset
ExFreePoolWithTag
ZwDeleteKey
RtlHashUnicodeString
RtlInitUnicodeString
ExAllocatePoolWithTag
IoFreeIrp
RtlFindMostSignificantBit
IoAllocateIrp
RtlGetVersion
RtlCharToInteger
KeTickCount
KeBugCheckEx

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ