fa0bf3529d3e6f3183b3f1d5465866b4551b3738a96eb998d7d2531616c59789 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa0bf3529d3e6f3183b3f1d5465866b4551b3738a96eb998d7d2531616c59789
Size

331KB
MD5

90ad85eea03dac32301a79448a488b3d
SHA1

a72841e0413c9a3c72f4051e974377f45c689fcb
SHA256

fa0bf3529d3e6f3183b3f1d5465866b4551b3738a96eb998d7d2531616c59789
SHA512

fd7725472e7149ea9121bb3d44a5d69e4c1bc0b556806e00fb89fc81b7c529cbca884e03cbb90fa9fae67b1a35bc9a2d7379bba547a6021665d852708fa7d553
SSDEEP

6144:8h5zcpV+t87Cqi/zznv4sGA8sxWae6u2Bya/rtU61I+AK3uK6HxjnLJtQodWihh6:8mT+tBqWLus4ae6lyap1I+Ayu7HxjnLm

Score

N/A

Malware Config

Signatures

Files

fa0bf3529d3e6f3183b3f1d5465866b4551b3738a96eb998d7d2531616c59789
.dll windows x86

5405936853920ebd5ca26ff57fa17b11

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

FsRtlCheckLockForWriteAccess
strncpy
CcRemapBcb
RtlInitUnicodeString
RtlCopyLuid
ExGetSharedWaiterCount
RtlCompareString
IoIsSystemThread
RtlEqualString
RtlInitString
ExGetPreviousMode
RtlIntegerToUnicodeString
RtlCharToInteger
IoInitializeIrp
RtlInitializeSid
KeInitializeTimerEx
KeInitializeDpc
RtlEqualUnicodeString
SeSinglePrivilegeCheck
KeInsertByKeyDeviceQueue
KeCancelTimer
FsRtlIsDbcsInExpression
KeRegisterBugCheckCallback
ExFreePoolWithTag
ExReinitializeResourceLite
CcFastMdlReadWait
RtlLengthSecurityDescriptor

Sections

.text
Size: 24KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 848B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ