834bfc3e25ba63060935107f30d4ffa5112f9a0dd639802b2cfee95cd32c31d0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

834bfc3e25ba63060935107f30d4ffa5112f9a0dd639802b2cfee95cd32c31d0
Size

15KB
MD5

f74a2fb9920a75b9b71a553e8e0be2f0
SHA1

250d18438fce37e365d7ad01a6ed8c3f7d427a43
SHA256

834bfc3e25ba63060935107f30d4ffa5112f9a0dd639802b2cfee95cd32c31d0
SHA512

bd313a24e3f9952053bdc818ca31835f68668a4addaeaa9ba0f3677ea65f386f53bfd983e5eccaf6a437e5a9ac567386e47142201c91260e3becc2e40130c0f2
SSDEEP

192:IchLAnF/L3NFQjpV9GvlfNrhrAzeHQ3txhnVliYr4Ie62ryKyr7iTEYaLWnlsmdm:WrNKjpCpt+zO6Bgzyr7OrYWnlzhG

Score

N/A

Malware Config

Signatures

Files

834bfc3e25ba63060935107f30d4ffa5112f9a0dd639802b2cfee95cd32c31d0
.dll windows x86

7a076c26388f5a941ecc5735d3f6c6c7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
GlobalFree
GetLastError
GlobalAlloc
GetModuleHandleA
Sleep
GetWindowsDirectoryA
ExitProcess
LoadLibraryA
GetProcAddress
FreeLibrary
LoadLibraryExA
DeviceIoControl

advapi32

DeleteService

Exports

Exports

RKTV

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ