adb73648e7bcbda1fe6caa15bdaa63ec0d397f456544ce83adefdbd6aa9c09b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adb73648e7bcbda1fe6caa15bdaa63ec0d397f456544ce83adefdbd6aa9c09b0
Size

47KB
MD5

7f1b8e962f185ff4bf5681601f94ec72
SHA1

09ad3773421d4076362a2707da295fa23b2d589d
SHA256

adb73648e7bcbda1fe6caa15bdaa63ec0d397f456544ce83adefdbd6aa9c09b0
SHA512

1919702054a523a12d6f1c287d19830a2f39dd3f685485467fbb22fa7e0120854eadc85b298f3f868d62a412a459572dcffe0cdda0e2081db71b4a0a26eda91b
SSDEEP

768:EvD2oPBzw94JLQU8Erswp1xhG5nlu39qIwsu:Eyyzw94JEURpLwpI

Score

N/A

Malware Config

Signatures

Files

adb73648e7bcbda1fe6caa15bdaa63ec0d397f456544ce83adefdbd6aa9c09b0
.exe windows x86

9b8c06ca3639463f6712c16974af0316

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlHashUnicodeString
RtlInitUnicodeString
RtlFindMostSignificantBit
ExFreePoolWithTag
IoFreeIrp
memset
IoAllocateIrp
ExAllocatePoolWithTag
RtlCharToInteger
ZwDeleteKey
RtlGetVersion
KeTickCount
KeBugCheckEx

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 896B - Virtual size: 796B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ