cb4bce19d104c3b1082eca4b7f58dcbb0923bcc68819348c5fc1d5f3646894d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb4bce19d104c3b1082eca4b7f58dcbb0923bcc68819348c5fc1d5f3646894d0
Size

63KB
MD5

0f50a91de377aef09306bc2d8bd5fa54
SHA1

630b18ef904516906a54455ada755f29f04166b9
SHA256

cb4bce19d104c3b1082eca4b7f58dcbb0923bcc68819348c5fc1d5f3646894d0
SHA512

d5509914df4b8314662ac2de9cd50951a2b8c295a53cc9788f72bcfe4bcf50ae9c95c328012ac48e12cc3c2cf15e10c0c28c97326636c481b69e2929c64aa480
SSDEEP

1536:wbKtC3QWCV2xbNJDdX53Ywr4jdpM+ZLceK0kb+NGQB3Z+qY+C:wuIg8xzDdX53Y5jdNLcexkCNGWwqYz

Score

N/A

Malware Config

Signatures

Files

cb4bce19d104c3b1082eca4b7f58dcbb0923bcc68819348c5fc1d5f3646894d0
.exe windows x86

e741f532f6bfe10d59b857a5e588418e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExInitializeZone
RtlAppendUnicodeToString
InterlockedExchangeAdd
RtlEqualUnicodeString
RtlCompareMemory
KeQuerySystemTime
IoWMIWriteEvent

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 332B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ