b7d32fd68fc3e69738f14e4f200b2db167ae6ae6e39bca7ae7ebc3efdc0a35f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b7d32fd68fc3e69738f14e4f200b2db167ae6ae6e39bca7ae7ebc3efdc0a35f2
Size

219KB
MD5

8165572be9a4476f2c4e82c555028ae9
SHA1

899c3695e3781d00a86304be130ec5f58418c7ec
SHA256

b7d32fd68fc3e69738f14e4f200b2db167ae6ae6e39bca7ae7ebc3efdc0a35f2
SHA512

fe267e95b46097ca3faed27060eac8e10f670c965e9f7da2034c0563cc6f69e54129996a7c6287c76ecbce483c61443837a88ead27c8e8500e209837a440dd93
SSDEEP

6144:cBSVTW1CSI3t3SO5cI7Mk9/mZmcYPv8HyPN/3EP:cBSVT/b3JSOH719XvWi1e

Score

N/A

Malware Config

Signatures

Files

b7d32fd68fc3e69738f14e4f200b2db167ae6ae6e39bca7ae7ebc3efdc0a35f2
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

WdfDeviceCreate
WdfDeviceGetDeviceName
WdfDeviceGetIoTarget
WdfDeviceInitSetFileEventCallbacks
WdfDeviceRegisterIoCallbacks
WdfDriverCreate
WdfFdoInitSetEventCallbacks
WdfFdoInitSetFilter
WdfIoQueueGetDevice
WdfIoTargetFormatIoctlRequest
WdfMemoryBufferCreate
WdfObjectDereferenceActual
WdfObjectReferenceActual
WdfRequestComplete
WdfRequestCompleteWithInformation
WdfRequestCreate
WdfRequestGetParameters
WdfRequestRetrieveBuffer
WdfRequestSend
WdfRequestSetCompletionRoutine

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ifc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE