aee653dcda8c432227ec291d2bcd9ba8f21fdb77b6d243ca623f37122ed4a1ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aee653dcda8c432227ec291d2bcd9ba8f21fdb77b6d243ca623f37122ed4a1ab
Size

22KB
MD5

8f63b2238323ca9b2a9311df823f477c
SHA1

04ecf9a12d678150dbc0a51ec71b2d08986595c1
SHA256

aee653dcda8c432227ec291d2bcd9ba8f21fdb77b6d243ca623f37122ed4a1ab
SHA512

c2b068d70af77a4f391dbafae2f0e86bd432b13f64533db5ef6c601c611a70838a04a481f351fbaef7259f5525f279ea8af1f611ce7ba8be8cb6a1403b2ec5cc
SSDEEP

384:LolqP9YB55RxGxxe/0eERtvX05YakcKjCQxn6th:0UP9YBJxIe/0btcJkcoxu

Score

N/A

Malware Config

Signatures

Files

aee653dcda8c432227ec291d2bcd9ba8f21fdb77b6d243ca623f37122ed4a1ab
.exe windows x86

3496a0b9e7c79621b9ee54279cce27fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitAnsiString
RtlAnsiStringToUnicodeString
MmIsNonPagedSystemAddressValid
MmGetSystemRoutineAddress
ExAllocatePoolWithTag
RtlValidRelativeSecurityDescriptor

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 384B - Virtual size: 258B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 34B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ