cb1a0ac8a8e8f04fa28c98efe4da0de75872b960d418b2dacddc4a46e53dcf7b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb1a0ac8a8e8f04fa28c98efe4da0de75872b960d418b2dacddc4a46e53dcf7b
Size

11KB
MD5

3322311473899fcda0cb98c3aff4ad26
SHA1

ad37bf188f9f52700e8c534eb3d63b4173c8ccab
SHA256

cb1a0ac8a8e8f04fa28c98efe4da0de75872b960d418b2dacddc4a46e53dcf7b
SHA512

aac294de999cd6d459aa773fe2f9dd66a68af61939be3f98d32a7dac3af7013f07de7a0120242d6045763b0e660d6f7664cd9f9770cbe1c9c3cb9e5b7ab638f8
SSDEEP

96:gZbTEsrvt0swSfKLq/k7arq1ITLGXWOS5eP92rTkFaZHnsbLpLXfoqRF9:y77GsjmqUareITLGXD/FFYsbLBwqR

Score

N/A

Malware Config

Signatures

Files

cb1a0ac8a8e8f04fa28c98efe4da0de75872b960d418b2dacddc4a46e53dcf7b
.exe windows x86

ee708decca95f815d6ce34421d1a3e2d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoFreeMdl
MmUnmapLockedPages
ZwMapViewOfSection
PsGetVersion
_stricmp
IoGetCurrentProcess
tolower
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmProbeAndLockPages
IoAllocateMdl
ObfDereferenceObject
ZwAllocateVirtualMemory
RtlInitUnicodeString
ObReferenceObjectByHandle
MmSectionObjectType
ZwPulseEvent
MmMapLockedPages
MmBuildMdlForNonPagedPool
MmCreateMdl
KeServiceDescriptorTable
_except_handler3

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 640B - Virtual size: 598B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 398B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ