8f45b7f38f29128febd41103232ab06b57dfffd4b7ab4ef98f5360bc29431013 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f45b7f38f29128febd41103232ab06b57dfffd4b7ab4ef98f5360bc29431013
Size

51KB
MD5

06f4629d1046965bf39e96d6586f211b
SHA1

14527880087c756b24306b8f20ec1144da69ed60
SHA256

8f45b7f38f29128febd41103232ab06b57dfffd4b7ab4ef98f5360bc29431013
SHA512

94bbcb15ee41f2f048febc2e0f1961109be321b3c527d6d27d637fc98a7eb0fd196cb10297a1992a4833cc679354e11e16ae6e5d82a7513f0afd66b84286b248
SSDEEP

768:uh0N+TTtG2Hoc1h09jQ7/D3ZsuUdSIihmDpqDXCLPwgi26:pohGEocb0jc/DSuUVW1CK2

Score

N/A

Malware Config

Signatures

Files

8f45b7f38f29128febd41103232ab06b57dfffd4b7ab4ef98f5360bc29431013
.dll windows x86

09e14156213e58fd6dfd64a990dce762

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlIntegerToUnicodeString
KeEnterCriticalRegion
RtlCharToInteger
ExSetResourceOwnerPointer
ZwDeleteKey
KeInsertDeviceQueue
RtlCompareString
KeCancelTimer
IoGetDriverObjectExtension
RtlCompareUnicodeString
MmCanFileBeTruncated
IoRemoveShareAccess
ExAllocatePoolWithQuotaTag
RtlInitString
RtlFindClearBitsAndSet
RtlInitUnicodeString
KeInitializeTimerEx
ObReferenceObjectByHandle
IoAcquireCancelSpinLock
strncpy
RtlEqualUnicodeString
IoGetCurrentProcess
IoFreeIrp
RtlUpperChar
RtlEqualString

Sections

.text
Size: 23KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ