91226dfaaaedc7e213ef84c59673e4085aabf8cb1b42805ecfe82708d85e0714 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91226dfaaaedc7e213ef84c59673e4085aabf8cb1b42805ecfe82708d85e0714
Size

14KB
MD5

c9c8393be3b4588a99c7b184203d7472
SHA1

6b10d1770f3e4c0d6156e9238dbb38bfb0040fb8
SHA256

91226dfaaaedc7e213ef84c59673e4085aabf8cb1b42805ecfe82708d85e0714
SHA512

ebaad37196e7bbe7d8e8e2fbeb0b8b63612ee4faaea0317e245691bd4e64b820678eb5e18366b8eff04e6d1812b1b58b9e8b28592984d54cb48fe6deef7f5d57
SSDEEP

384:4aUBCx+qWMpe9lK5y0f+tA93RIQ+sDBZjX:xWM2my02d+Zr

Score

N/A

Malware Config

Signatures

Files

91226dfaaaedc7e213ef84c59673e4085aabf8cb1b42805ecfe82708d85e0714
.dll windows x86

ec72e0824730e7e272011fd30232b606

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

PsLookupProcessByProcessId

Sections

.text
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ