b17a5035aa37bcf922192c0d9ceee60081cfd2091df2362299596ea31a5179d1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b17a5035aa37bcf922192c0d9ceee60081cfd2091df2362299596ea31a5179d1
Size

3KB
MD5

67266401ca1596f83fbb28c6c553f5e0
SHA1

2784b0061de8b11c695faf0e7a0bcea433a05357
SHA256

b17a5035aa37bcf922192c0d9ceee60081cfd2091df2362299596ea31a5179d1
SHA512

ff4163be9db35e618f7fe65adfe36ff52afc2adb3e8dfe1afa05f17b4684cb9bb1ee62631fcf0d30dac7d0209ae79247ac75a7a1a180173d6efd8f031f164344

Score

N/A

Malware Config

Signatures

Files

b17a5035aa37bcf922192c0d9ceee60081cfd2091df2362299596ea31a5179d1
.exe windows x86

b6d08cc1950cbb580ee9dc8873781b91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoGetDeviceObjectPointer
IoDriverObjectType
IoCallDriver
ObReferenceObjectByName
ObDereferenceObject
IoBuildDeviceIoControlRequest

ndis.sys

NdisRegisterProtocol
NdisDeregisterProtocol

Sections

.text
Size: 576B - Virtual size: 566B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 160B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 320B - Virtual size: 320B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ