9f1c1e7e26df4026e803f9a272e2ac417cee020a1d81946b5c56f38c252a049d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f1c1e7e26df4026e803f9a272e2ac417cee020a1d81946b5c56f38c252a049d
Size

64KB
MD5

6912fc9d2bf8919a3814d122c63363b3
SHA1

b372c7b6b4930ef9abf673e2fc03861dc43d9b78
SHA256

9f1c1e7e26df4026e803f9a272e2ac417cee020a1d81946b5c56f38c252a049d
SHA512

bd9ec622a521fa8ba86a4c15329e7967f236cf2b8878a75956c452881bf050f5c34b6c9f6853ae26dd1d8be01ce91ed48ccd2fe5133e7c500367e6e0a9765a4c
SSDEEP

1536:4++cqj2fluCvZoh2NN1Zeosz1cLe/7YcaC:Rm2fIo+k1ZeoszSSTYcP

Score

N/A

Malware Config

Signatures

Files

9f1c1e7e26df4026e803f9a272e2ac417cee020a1d81946b5c56f38c252a049d
.exe windows x86

4b83aae50e2e67d5014be126a21c1cc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoGetDiskDeviceObject
IoFreeIrp
InterlockedExchangeAdd
PsReturnPoolQuota
ExAllocatePoolWithTagPriority
PsChargeProcessPoolQuota
RtlCopyUnicodeString
RtlCompareUnicodeString
MmResetDriverPaging

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ