2e1659310b40ca69d4e8bf831f05da4b1e5a6f6e6f2c27aebd71e581212f034c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e1659310b40ca69d4e8bf831f05da4b1e5a6f6e6f2c27aebd71e581212f034c
Size

73KB
MD5

1d762a064e1af5a3dbf37ffc2f81564b
SHA1

9036d5e627a1bf26cbd75504dec858defca145c4
SHA256

2e1659310b40ca69d4e8bf831f05da4b1e5a6f6e6f2c27aebd71e581212f034c
SHA512

c10ebef2de193604820cfb48cb1602bd9badbed98bcaaa85529f2ea3c8702f539f6d17e5dc2e16134d1843246276923bac0387824d116a1b1c225a0bee6eb301
SSDEEP

1536:w8Pvwi+nijSjIVWb294EdUEe4Z8E4yFuv+t1v:w8Pvb+ijSjIVWq3dUDi8E4yFG+t1v

Score

N/A

Malware Config

Signatures

Files

2e1659310b40ca69d4e8bf831f05da4b1e5a6f6e6f2c27aebd71e581212f034c
.dll windows x86

dca231a9b53e3522426a43001733f2f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlUpcaseUnicodeString
KeResetEvent
CcCopyRead
RtlUnicodeToMultiByteN
RtlEqualString
KeSetTargetProcessorDpc
RtlCompareString
RtlInitUnicodeString
CcFastCopyWrite
MmMapLockedPagesSpecifyCache
IoCreateDevice
ExGetPreviousMode
RtlIntegerToUnicodeString
KeSynchronizeExecution
KeInitializeTimerEx
KeUnstackDetachProcess
ExLocalTimeToSystemTime
RtlAnsiCharToUnicodeChar
KeInitializeDpc
RtlCharToInteger
IoGetDriverObjectExtension
RtlInitString
RtlEqualUnicodeString
KeCancelTimer
SeImpersonateClientEx
strncpy

Sections

.text
Size: 23KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ