c1172df8225d40c522c62771adce323d4199b9d85233f4faecba2432e1973703 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1172df8225d40c522c62771adce323d4199b9d85233f4faecba2432e1973703
Size

74KB
MD5

333d100691f50e5e5a13a10d986e7fd2
SHA1

abe7d25f63e0f7c31b1c7f8cef776ec54d62e011
SHA256

c1172df8225d40c522c62771adce323d4199b9d85233f4faecba2432e1973703
SHA512

55e2025af1dcec96dc26716e17aca72efedccf73f1d1fad30769ef6c3342e18ea0b825d0f13631d42f771d07a239734704af004c0293fd62a06af477271005d4
SSDEEP

1536:1hULPkBFVxV7ZmR8GFkFNXEwUuptZz3T4xneYQ9tK:3wP8F8dF+XxUOth30eZz

Score

N/A

Malware Config

Signatures

Files

c1172df8225d40c522c62771adce323d4199b9d85233f4faecba2432e1973703
.exe windows x86

e18dac891ff7108c920a5fd8c641f690

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeWaitForSingleObject
IoGetRelatedDeviceObject
IoAttachDevice
ObfDereferenceObject
IoFreeMdl
IoFreeIrp
IofCompleteRequest
memcpy
IoAllocateWorkItem
ObfReferenceObject

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 292B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ