aa33676971a9659481db6bf615ed7ab67ec2f16db7757364e4abd38b5b08374f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa33676971a9659481db6bf615ed7ab67ec2f16db7757364e4abd38b5b08374f
Size

29KB
MD5

adac20a66ada720863134ba76abc9ecf
SHA1

f8fb77cdece0acb92e63ce32cf62c24a1ce23322
SHA256

aa33676971a9659481db6bf615ed7ab67ec2f16db7757364e4abd38b5b08374f
SHA512

bd4b7eb10d7a40a6ce1448bf7929e70c81140db87d2bfe41c6c341dadecf3054a6dcbabd54589021296960ecfadeea7ac4a97bab1b806fb37b41fe7e7c152563
SSDEEP

768:/tlNsh5bNRZmKPvg6zaxhCr2RGms+AC/VfiOdqa:/1sZRdP46uJ2+AoVL

Score

N/A

Malware Config

Signatures

Files

aa33676971a9659481db6bf615ed7ab67ec2f16db7757364e4abd38b5b08374f
.exe windows x86

caed740047327835987440169debea21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

PsGetCurrentProcessId

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 96B - Virtual size: 86B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ