6a4f906cd136259cb331a331c18ccab4f9a66545b34ed8cc03b250a8f179437e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a4f906cd136259cb331a331c18ccab4f9a66545b34ed8cc03b250a8f179437e
Size

219KB
MD5

410a74e09bfe25b967fc182c278aacc0
SHA1

0ff943e747de0afacb5a1d2e5cda57b1b16d1a1c
SHA256

6a4f906cd136259cb331a331c18ccab4f9a66545b34ed8cc03b250a8f179437e
SHA512

88a7fa75d53abad5588491ed4d7654cf254e489920ce59896101f0849365fafd7afdfbba8857367cc934ae70b185f1542d54f6a16852c1f8ab736e2ccba9cb8f
SSDEEP

3072:UcILkiYvmgo3HMisfGV99XcGDAI0blOMxzTLeeCUylW93q9N9JmNa2wsSK:UcCbH3SOqZbcMFZH93w0

Score

N/A

Malware Config

Signatures

Files

6a4f906cd136259cb331a331c18ccab4f9a66545b34ed8cc03b250a8f179437e
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

WdfDeviceCreate
WdfDeviceGetDeviceName
WdfDeviceGetIoTarget
WdfDeviceInitSetFileEventCallbacks
WdfDeviceRegisterIoCallbacks
WdfDriverCreate
WdfFdoInitSetEventCallbacks
WdfFdoInitSetFilter
WdfIoQueueGetDevice
WdfIoTargetFormatIoctlRequest
WdfMemoryBufferCreate
WdfObjectDereferenceActual
WdfObjectReferenceActual
WdfRequestComplete
WdfRequestCompleteWithInformation
WdfRequestCreate
WdfRequestGetParameters
WdfRequestRetrieveBuffer
WdfRequestSend
WdfRequestSetCompletionRoutine

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.heb
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE