a584fb35118c10cd6903fc730e9542eb61f823f773ab5f155b87fb894a5b2807 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a584fb35118c10cd6903fc730e9542eb61f823f773ab5f155b87fb894a5b2807
Size

19KB
MD5

a26e8f390ca1de85bfc92f0a779010e9
SHA1

6d4bcef82721b0cd6be9371513b8da185fd40ac5
SHA256

a584fb35118c10cd6903fc730e9542eb61f823f773ab5f155b87fb894a5b2807
SHA512

7f2ce73456098fe3b1fb8848ae5e4dff0d32f65ad71ee5a11e299bb3febfd743d1df972154bb32ece64770e8c6b204b70bb536d8dedf89b10f583491c9c2e996
SSDEEP

96:/krOOK7iWWqSeJWsiW1w38OBroRJH7juQbqNp/lUi6qGVHZur90+:/kKO1WWOJWsFxoEp1Id6Vgr

Score

N/A

Malware Config

Signatures

Files

a584fb35118c10cd6903fc730e9542eb61f823f773ab5f155b87fb894a5b2807
.exe windows x86

d44ede785881c8646327e5a077c4f9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
_except_handler3

Sections

.text
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ