b0f94dde2cfaab242a148311e21fece9c9a193fd2859adf4eeaaad0786d4bfc7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0f94dde2cfaab242a148311e21fece9c9a193fd2859adf4eeaaad0786d4bfc7
Size

5KB
MD5

18d9262862412b466cd7a516cd34eef1
SHA1

3524d64869aae5a05966332e16559b46a701a24b
SHA256

b0f94dde2cfaab242a148311e21fece9c9a193fd2859adf4eeaaad0786d4bfc7
SHA512

e83d9f121d9484d48d90d5d7bb34ecd540105779e3d96ed58d1832a4b55cc65dead1355805f2d9d3f2e09564b017de0db9588182a1d224b30eb64757f36714c2
SSDEEP

96:2iMvob198Tb7Nb/7vBXieiEHKn8vm86N8Zy1h6y81Gh9X7:tb198TbZTrBXieiEq+m58ZyKJ0n

Score

N/A

Malware Config

Signatures

Files

b0f94dde2cfaab242a148311e21fece9c9a193fd2859adf4eeaaad0786d4bfc7
.exe windows x86

f86e8fe8b263ea93ee50105a86dc4420

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

MmMapLockedPages
MmBuildMdlForNonPagedPool
ExFreePoolWithTag
wcslen
RtlWriteRegistryValue
RtlCreateRegistryKey
RtlCompareUnicodeString
ZwNotifyChangeKey
ZwOpenKey
ZwClose
ZwSetValueKey
ZwCreateKey
RtlQueryRegistryValues
memmove
ExAllocatePoolWithTag
RtlInitUnicodeString
_except_handler3
KeServiceDescriptorTable
MmIsAddressValid
KeAddSystemServiceTable
MmCreateMdl
KeTickCount
KeBugCheckEx

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 180B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 768B - Virtual size: 672B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 384B - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ