22b6e5d526b4fd21a104fb9a907f4dedef4d469366d334fe8792093972dd1f31 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

22b6e5d526b4fd21a104fb9a907f4dedef4d469366d334fe8792093972dd1f31
Size

71KB
MD5

550d905e3f368ef6ff118da5017659b4
SHA1

e4fe33466566875caa85a8612e14d9715b0bed81
SHA256

22b6e5d526b4fd21a104fb9a907f4dedef4d469366d334fe8792093972dd1f31
SHA512

600f2c808f52bacd942dcbf0142ff2897247a25021a1bf8cd6c050906dd09d7b709630748cb7a7cf6723d5d08838b412e1c898f9b0a63f81b215f11119a25c02
SSDEEP

768:c37TUi0baIApRqi0OZM/LxXgt/5gowZXoPDhvQEg5FiOXpVTJM5+5SIkKQbB+mk:ITU2IA/3AXgtBF68OZ925IjEjk

Score

N/A

Malware Config

Signatures

Files

22b6e5d526b4fd21a104fb9a907f4dedef4d469366d334fe8792093972dd1f31
.dll windows x86

a80d5dc87ea2a905e908a533da69b6da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeSetImportanceDpc
RtlEqualString
RtlInitUnicodeString
RtlEqualUnicodeString
KeBugCheckEx
CcFastCopyWrite
MmMapLockedPagesSpecifyCache
ZwClose
ZwQueryInformationFile
ZwQueryVolumeInformationFile
RtlSubAuthoritySid
FsRtlCheckLockForReadAccess
RtlOemStringToUnicodeString
KeSetPriorityThread
PoSetSystemState
RtlInitString
PoUnregisterSystemState
RtlUpperChar
ExFreePoolWithTag
IoCancelIrp
PoStartNextPowerIrp
KeGetCurrentThread
ExAcquireResourceSharedLite

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ