03eaf4c06d868e26cf485f70d8d9ace17c477a1f4d067c97aeba01c3fb4bcfad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03eaf4c06d868e26cf485f70d8d9ace17c477a1f4d067c97aeba01c3fb4bcfad
Size

133KB
MD5

6618c844b21a1a34df55b64419b03eed
SHA1

5c593312ed3aef55860dc52acfd69cd8f32c3f3d
SHA256

03eaf4c06d868e26cf485f70d8d9ace17c477a1f4d067c97aeba01c3fb4bcfad
SHA512

c104ff3e20fabc706428f412a45e602e1ab2f269671ad00620ed783252ffc053c08cf06f0b06f292f35b0c3b763a8088b85f1638cd8fc47506246463ca91fb6e
SSDEEP

3072:MtCKDsCRB7kzX/t1MAFFMTBzQeG+HU+pBoKFGoLlCZ40HE+g:MtBLRB7knMff7RpGoLlCZ40HE+g

Score

N/A

Malware Config

Signatures

Files

03eaf4c06d868e26cf485f70d8d9ace17c477a1f4d067c97aeba01c3fb4bcfad
.dll windows x86

249a33eda2bfac544ace84a8aa1e1ef0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

DbgPrint
wcsncpy
RtlAnsiCharToUnicodeChar
strstr
ExAll<0atePoolWithTag
MmMapLockedPagesSpecifyCache
ZwQuerySystemInformatSoW
ExFreePoolWithTag
KeBugCheckEx
strncmp
KeQueryTim�Increm@nt
ObReferenceObjectByH
KeTickCount
strncpy
IoGetCurrentPr<0:�
_ex0pt_h
ObfReferenceObject

Sections

.data
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 160B - Virtual size: 145B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 544B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.re�<0
Size: 160B - Virtual size: 158B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE