9b4dd72fa50e4250e9cc5191cdb95dd6850a9b00d6ee02ea1e813a4da4570adf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b4dd72fa50e4250e9cc5191cdb95dd6850a9b00d6ee02ea1e813a4da4570adf
Size

72KB
MD5

60f079d6649ee34fe9ce62f21c7ff9d8
SHA1

442c2bd06339e3ba8efe79fe115bd1887c0c24d9
SHA256

9b4dd72fa50e4250e9cc5191cdb95dd6850a9b00d6ee02ea1e813a4da4570adf
SHA512

3be9d183acf2c1922a2ff5439b65bf33a85e798a59c7f5a596137293c68b37b8b201e04e5b2087b0021be83e43f9b95af9339aa3544304a2a007b6023b9c326a
SSDEEP

1536:dyFxR/JUOx/3AXi+2kSRl591OTKU08MyFdl5w8xJXO3O:dQDRBEF+b94OyFdlq8x0e

Score

N/A

Malware Config

Signatures

Files

9b4dd72fa50e4250e9cc5191cdb95dd6850a9b00d6ee02ea1e813a4da4570adf
.dll windows x86

a6713f89b6214adf204e1a18e8f455a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlEqualString
ExAcquireFastMutexUnsafe
FsRtlCheckOplock
RtlEqualUnicodeString
RtlFreeAnsiString
RtlCharToInteger
RtlUpperChar
MmGetPhysicalAddress
RtlDowncaseUnicodeString
KeInitializeEvent
RtlInitString
RtlInitUnicodeString
IoIsSystemThread
RtlPrefixUnicodeString
RtlUnicodeStringToAnsiString
RtlDeleteRegistryValue
IoDetachDevice
IoFreeController
MmResetDriverPaging
FsRtlIsTotalDeviceFailure
KeWaitForSingleObject
IoAllocateController
CcSetBcbOwnerPointer
KeInitializeSemaphore
PsTerminateSystemThread
ExRaiseDatatypeMisalignment
KeSetTargetProcessorDpc

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ