a23474a294dfe5a1785459fa1cc2bff56ad561f3f4c419f158e9fe821e82a028 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a23474a294dfe5a1785459fa1cc2bff56ad561f3f4c419f158e9fe821e82a028
Size

4KB
MD5

993b9a2bfc5330d498ae7a40050149cd
SHA1

b408e68f979a80e9995e7ffc2464d4dead25a51a
SHA256

a23474a294dfe5a1785459fa1cc2bff56ad561f3f4c419f158e9fe821e82a028
SHA512

a07d60ffbaee5be3ce315e4564fc19c1f760a026a4cc9a5b03f8943a78e579631d67e69f114744eea90a54a29ccec04a5ee47a6e32463ead9699fa1612d971e7
SSDEEP

48:SViBtkv69FuORJMHD/KWvJAqelb3vXW2Ghry3LXN2eVbEFxa:QCVJMhr0b3v/wy3LXIwEFc

Score

N/A

Malware Config

Signatures

Files

a23474a294dfe5a1785459fa1cc2bff56ad561f3f4c419f158e9fe821e82a028
.exe windows x86

11729622eadba3fdb0ea1f704cc17636

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

DbgPrint
ExFreePoolWithTag
ExAllocatePoolWithTag
ZwQuerySystemInformation
RtlFreeUnicodeString
ZwClose
ZwReadFile
ZwSetInformationFile
ZwOpenFile
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeServiceDescriptorTable
_except_handler3
KeTickCount
KeBugCheckEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 466B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ