b906a0de9e231b29520c3073249739e37c51a5f962e9f306c72cdc7c440e369c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b906a0de9e231b29520c3073249739e37c51a5f962e9f306c72cdc7c440e369c
Size

8KB
MD5

69eb46ffa79ebb8527239f311d013b20
SHA1

a5b1d1bff53646867d22b4538f1c9a3952425256
SHA256

b906a0de9e231b29520c3073249739e37c51a5f962e9f306c72cdc7c440e369c
SHA512

46115a1d7907ada3d18d7a75cf9d3c772b12a42d06a0f51d7f67f04216c8434ce6868bc09e2e1b57eb4171336cee4d2ec7d9326e0f852e30a6baaa4a1a8dbbf8
SSDEEP

96:qwA5MRgFXYuWqSeJWsiW1w3lVLiiDW8BH/2enyTRCIk1KE/bmtHliZLPFe:+3FXzWOJWsFKNXBf2eOX8veHli5I

Score

N/A

Malware Config

Signatures

Files

b906a0de9e231b29520c3073249739e37c51a5f962e9f306c72cdc7c440e369c
.exe windows x86

97a8fcb81cca995ded498133c0d6f73a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
_except_handler3
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
KeTickCount

Sections

.text
Size: 640B - Virtual size: 564B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ