3656434a420e47f36c8a2d6234d405e720feab95f8bf1984db570b05d58faa57 | Triage

Sharing

General

Target

3656434a420e47f36c8a2d6234d405e720feab95f8bf1984db570b05d58faa57
Size

3KB
MD5

130880ad111aa05ddc6f89256993e020
SHA1

18d7721010aff4c2ef6e58af875c2b2c33c313b3
SHA256

3656434a420e47f36c8a2d6234d405e720feab95f8bf1984db570b05d58faa57
SHA512

152292c25dc3d40253f17b587af94e479d3155955f3048d634933034cfb0ab161867dd480a8db8a432cf16bab7eafe069fee39385c429c86ed154dea68d011bd

Score

N/A

Malware Config

Signatures

Files

3656434a420e47f36c8a2d6234d405e720feab95f8bf1984db570b05d58faa57
.exe windows x86

c4b7c8fabc366471234f118f99623680

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
DbgPrint
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
_except_handler3

Sections

.text
Size: 768B - Virtual size: 684B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 324B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ