456c46c0d418b1e53b2c66bf44580eaec5122dbbc62d6418fea6746795f206e6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

456c46c0d418b1e53b2c66bf44580eaec5122dbbc62d6418fea6746795f206e6
Size

377KB
MD5

dfd5450824c6e0218c022f2d266bd254
SHA1

37686a4eab3ffffa5be40bccd9335b66837d0e15
SHA256

456c46c0d418b1e53b2c66bf44580eaec5122dbbc62d6418fea6746795f206e6
SHA512

5ea1dd92a3c40f957bc49d9a5a7bd66992c959eba8dd1fc306070659aa765cca55deea5ea8fbc2a0e1b63ce3c868c9e9a2aa1950a5f08770057e3fab9f3ee8b8
SSDEEP

6144:Rdx0XqPjd7Q0fdO6/SFdxhKJ732wPhwdgadFiDLb95:RdxSqP57Q0ncxY2wwQbP

Score

N/A

Malware Config

Signatures

Files

456c46c0d418b1e53b2c66bf44580eaec5122dbbc62d6418fea6746795f206e6
.exe windows x86

3227d152fb50b718a9aa20e631249ec9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

PsCreateSystemThread
ZwCreateEvent
RtlInitUnicodeString
KeDelayExecutionThread
RtlFreeAnsiString
atoi
RtlFreeUnicodeString
RtlUnicodeStringToAnsiString
RtlQueryRegistryValues
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 318KB - Virtual size: 318KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 346B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ