988cea91813aac80f76899386c60bec6c46cf20e9b23e3b0bb94499e2ff770b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

988cea91813aac80f76899386c60bec6c46cf20e9b23e3b0bb94499e2ff770b7
Size

243KB
MD5

83dff6fce997925a0ec94adb3ee834dd
SHA1

5d912356ba99061201b6a772d82d37000d4e60d8
SHA256

988cea91813aac80f76899386c60bec6c46cf20e9b23e3b0bb94499e2ff770b7
SHA512

7db4afe86b766a61336e1efa4281a3a9217992346d42cc38854ec1873ab6a39bd1d4cc160c95051cc3affb0429ec699b7ee00889911ac31f2195b15748365532
SSDEEP

3072:KTUcPcpXU96nRSYGABHGCnfhFokjlQqidEQZ4r1kzIXKFrtzM8PTBfUY2Sqb8OCM:7cOXxNxj7jKd+r36FrtzM8PTBsY9q/s0

Score

N/A

Malware Config

Signatures

Files

988cea91813aac80f76899386c60bec6c46cf20e9b23e3b0bb94499e2ff770b7
.dll windows x86

a80d5dc87ea2a905e908a533da69b6da

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeSetImportanceDpc
RtlEqualString
RtlInitUnicodeString
RtlEqualUnicodeString
KeBugCheckEx
CcFastCopyWrite
MmMapLockedPagesSpecifyCache
ZwClose
ZwQueryInformationFile
ZwQueryVolumeInformationFile
RtlSubAuthoritySid
FsRtlCheckLockForReadAccess
RtlOemStringToUnicodeString
KeSetPriorityThread
PoSetSystemState
RtlInitString
PoUnregisterSystemState
RtlUpperChar
ExFreePoolWithTag
IoCancelIrp
PoStartNextPowerIrp
KeGetCurrentThread
ExAcquireResourceSharedLite

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ