8238a913ad4274a2ba780ec8ad749f9b5a91a6a054b7b55a62189beea25a7d52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8238a913ad4274a2ba780ec8ad749f9b5a91a6a054b7b55a62189beea25a7d52
Size

39KB
MD5

91348ca736e534498bd47b6b75b50284
SHA1

76b0bf130dfa2e66a78a41fab6c369d23ce78abe
SHA256

8238a913ad4274a2ba780ec8ad749f9b5a91a6a054b7b55a62189beea25a7d52
SHA512

50cc5a893e76349b84fc48cc0bbf261c2f612e4da40aace6a7495ac8987bc1c9f2fcb6cbb3ff04cc8142498348e15868b67bda1ca9476e58ecad1bafdb9cc4a5
SSDEEP

768:ClvbJ3iP2+/N4ZPay0kkgcHLxtwiDw2snmVFGbSC:qvbNiP2/PaygPrQmsmISC

Score

N/A

Malware Config

Signatures

Files

8238a913ad4274a2ba780ec8ad749f9b5a91a6a054b7b55a62189beea25a7d52
.exe windows x86

b744ce73af37876081529c0fe80add5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoCreateDevice
RtlEqualSid
RtlInitUnicodeString
PsGetCurrentProcess
MmGetSystemRoutineAddress
MmIsNonPagedSystemAddressValid
KeSetBasePriorityThread
ExAllocatePoolWithTag

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 384B - Virtual size: 328B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ