69a275e3cf00ecd43c01d767bd13e21840456bf24d310da3431ce651db874606 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69a275e3cf00ecd43c01d767bd13e21840456bf24d310da3431ce651db874606
Size

6KB
MD5

9694cd7c51942ccda179a9ca99905df0
SHA1

9f0c6c9ed5acecbad8010d86faa812f520d8fdcf
SHA256

69a275e3cf00ecd43c01d767bd13e21840456bf24d310da3431ce651db874606
SHA512

f88527fe9ad6692a7dfb3aeea733ae4bf3fd8dfbec1e6c090c50d498cfe5fd69ceaf6eb1e2ff94ebf368bae6c99e81ca3c7d66d8159856b12598e6c2bc38c8dc
SSDEEP

96:QhuGNjcp1gPX2t6EwRN/bGYULr8594bnooJTXY4jhsq0UZf3X3X3frPf3M2L2M1c:QhVYp1u5xRN2Lr8YnPsWhZ1nT

Score

N/A

Malware Config

Signatures

Files

69a275e3cf00ecd43c01d767bd13e21840456bf24d310da3431ce651db874606
.exe windows x86

b261edee57d40957b60dfa7bd918933d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
ExFreePoolWithTag
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
RtlFillMemory
RtlZeroMemory
ZwQuerySystemInformation
sprintf
strcpy
strlen
strncpy
KeServiceDescriptorTable
DbgPrint
IofCompleteRequest

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 480B - Virtual size: 461B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 864B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 416B - Virtual size: 412B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ