453286093b6b2d791b2505384bda59ccadebc3078ad66f13bf4a0262011aa954_unpacked | Triage

Sharing

Copy URL Twitter E-mail

General

Target

453286093b6b2d791b2505384bda59ccadebc3078ad66f13bf4a0262011aa954_unpacked
Size

68KB
MD5

ecd46877ac26636beba3288939018b1f
SHA1

7d3a8fcd0a010fcf913cd89796cdc288c67c2a8b
SHA256

f47dd110ab46a0d3d0a4d69cae609f95257860f85d32d633e9242ea4aeef249e
SHA512

5c6137dd4a960b957044f832fe774b41eedff34a9857bde3d28a714e4fe75a54599d842fe324d5da1575dc7a768e825e2fe7c149b0a69c55a26c2351083cfa9e
SSDEEP

1536:GDiY8WQ9CSaOUVAeR4KpIINoJBk6cPvbQ916D4qvUoyG64C2XjtQNIwAR:iTvQ9FaOUVQI/6cn416D/3yGdTOy

Score

N/A

Malware Config

Signatures

Files

453286093b6b2d791b2505384bda59ccadebc3078ad66f13bf4a0262011aa954_unpacked
.exe windows x86

507595e0749f1df3ff0199de6cd88c3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

IoCreateDevice
ExFreePool
ExAllocatePool
IoCompleteRequest
ZwQuerySystemInformation
RtlInitUnicodeString
KeReleaseMutex
IoDeleteDevice
KeWaitForSingleObject
IoCreateSymbolicLink

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE