c5234f181ca8fb1970e0552c59e7c7ad282d20779cab2905e790ec06596f580a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5234f181ca8fb1970e0552c59e7c7ad282d20779cab2905e790ec06596f580a
Size

134KB
MD5

b5e15a9a8557eb9500ee6e287bcd6339
SHA1

deda8187a067073278a170e8426f3beb75cd08a4
SHA256

c5234f181ca8fb1970e0552c59e7c7ad282d20779cab2905e790ec06596f580a
SHA512

e6b7961d38b214cdd815e6fc780cdc4b582b4690e7134c5e56a836ed9d94875fa92f813d594cfdbdff7fbeadac450e366e1b72cd430281cd2a240ed8fea495b0
SSDEEP

3072:HSfs5ATUdm5lJEDG/88sUowcbTysaw5IlAK:2s+g4pE8awcXysp5Il

Score

N/A

Malware Config

Signatures

Files

c5234f181ca8fb1970e0552c59e7c7ad282d20779cab2905e790ec06596f580a
.dll windows x86

191a302ccb4292d54351d38a1e621c92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ObReferenceObjectByHandle
ExAllocatePoolWithTag
MmMapLockedPagesSpecifyCache
ZwQuerySystemInformation
IoGetCurrentProcess
_except_handler3
strncpy
ObfReferenceObject
KeTickCount
KeBugCheckEx
DbgPrint
KeQueryTimeIncrement
strstr
wcsncpy
RtlAnsiCharToUnicodeChar
ExFreePoolWithTag

Sections

.data
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 160B - Virtual size: 149B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 160B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE