50ee64f9eeafa35a8d3aa174984b0dd6fb81a6df1f1f4711c4724ff6a0a883f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

50ee64f9eeafa35a8d3aa174984b0dd6fb81a6df1f1f4711c4724ff6a0a883f5
Size

8KB
MD5

6bc0c616cb81eaf0543db377156a5941
SHA1

106cdabec9a4abbe7836c99c4c4e4734524398bd
SHA256

50ee64f9eeafa35a8d3aa174984b0dd6fb81a6df1f1f4711c4724ff6a0a883f5
SHA512

a6da44d1119ca62f5e84d4f7b691813afe4b29958d7690d7f99f1e02ac1a586923be7fbcd24c8cb9f861f30a8c04af4d5234fb009d430c2a834036d538c26864
SSDEEP

96:7a6hoD+EUG0mYl0oxcRaogItrdL/BakpW67DGZ5u3Y:kD+EUG0jaaoZpd8m7quI

Score

N/A

Malware Config

Signatures

Files

50ee64f9eeafa35a8d3aa174984b0dd6fb81a6df1f1f4711c4724ff6a0a883f5
.exe windows x86

c41755fca802469f15d098c447366c68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
IoDeleteDevice
IoDeleteSymbolicLink
IofCompleteRequest
DbgPrint
MmIsAddressValid
KeServiceDescriptorTable
IoCreateSymbolicLink
IoIsWdmVersionAvailable
IoCreateDevice
KeTickCount
KeBugCheckEx
RtlUnwind

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 384B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ