ba7204d873f42789be73afc29c92504e8c952861a424bc9eae88d6fa4b391bbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ba7204d873f42789be73afc29c92504e8c952861a424bc9eae88d6fa4b391bbb
Size

133KB
MD5

d8399f8d2b2a0d673c68f1734d937820
SHA1

7b45033e42e2da9717b332d5d94e62b56e730e79
SHA256

ba7204d873f42789be73afc29c92504e8c952861a424bc9eae88d6fa4b391bbb
SHA512

6ae31ca8f27c6cf854f1788bfeb04bc725e6f21ec4f2471a32283828fa59409e29eba129ea5940e121007ccc2c5303e1fccd8fa7266c7043e07b17c39cab8ccd
SSDEEP

3072:WKH6yeELXJLCgkBJgLmuY0XTXi1FDLaIfwBhvy:J6Z+58BwmuYcaaIoBhq

Score

N/A

Malware Config

Signatures

Files

ba7204d873f42789be73afc29c92504e8c952861a424bc9eae88d6fa4b391bbb
.dll windows x86

e629f2e9bb9bd5e77433832d6b885358

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
strncpy
DbgPrint
strstr
ExFreePoolWithTag
KeTickCount
_except_handler3
wcsncpy
ObReferenceObjectByHandle
strncmp
ObfReferenceObject
MmMapLockedPagesSpecifyCache
ZwQuerySystemInformation
ExAllocatePoolWithTag
IoGetCurrentProcess
KeQueryTimeIncrement
RtlAnsiCharToUnicodeChar

Sections

.data
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 160B - Virtual size: 148B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 544B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 160B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE