c961a487b5bb0b25a011207173a254f6b8dd1faeb24dc6220b1a2bb8f7592d43 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c961a487b5bb0b25a011207173a254f6b8dd1faeb24dc6220b1a2bb8f7592d43
Size

10KB
MD5

8507bed1ca52f695f67b6a4b86a2e930
SHA1

85c0ccb81875dd083efade8f98f9b59d4b8214ad
SHA256

c961a487b5bb0b25a011207173a254f6b8dd1faeb24dc6220b1a2bb8f7592d43
SHA512

13e04eb7e1a4f9f7fc235724d5d4572226a37cfdbe4557c3cf727efcb0425beb41f436578171e2fab4a47443f40eeeadd485502c8f51df29f9b897aaa50c4cad
SSDEEP

96:0EJPxSAqdgn9Qmt4lN4byMe/cw5hk2ZAAqZjBGEcH4cIpQ1TIH:0EfSAqKn9H4r7bVgOKPGyb

Score

N/A

Malware Config

Signatures

Files

c961a487b5bb0b25a011207173a254f6b8dd1faeb24dc6220b1a2bb8f7592d43
.exe windows x86

cf6af5a07cd6fb64445578dc02915dfc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteSymbolicLink
RtlAnsiStringToUnicodeString
RtlInitAnsiString
ObfDereferenceObject
IoGetDeviceObjectPointer
KeWaitForSingleObject
IofCallDriver
IoBuildSynchronousFsdRequest
KeInitializeEvent
RtlFreeUnicodeString
_except_handler3
MmGetSystemRoutineAddress
IofCompleteRequest
RtlEqualUnicodeString
IoCreateSymbolicLink
IoCreateDevice
IoDeleteDevice

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 160B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 544B - Virtual size: 524B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 480B - Virtual size: 450B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ