ecbb0a454c63500d66dff9574ad02b46d625be4d52877a18ec20816cd0577dd8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecbb0a454c63500d66dff9574ad02b46d625be4d52877a18ec20816cd0577dd8
Size

48KB
MD5

07e03e6b85954dab02609ab026820004
SHA1

fad165922f77f99e2e4c678927a69f94f986c7b4
SHA256

ecbb0a454c63500d66dff9574ad02b46d625be4d52877a18ec20816cd0577dd8
SHA512

06c775cff39ab624868ae8454aa8aae0c9c487fd594d8f4ea6296946c65016c62692b624ba1c8d9b7a5998edda98ffe84a326f457240be5a33b13fa0ff1e446a
SSDEEP

1536:Znj/Jtoxa8u2NPnnoSyLHRHK6XSIG1SW:ZnVSa8rEbn5/

Score

N/A

Malware Config

Signatures

Files

ecbb0a454c63500d66dff9574ad02b46d625be4d52877a18ec20816cd0577dd8
.exe windows x86

610b17a65a60cfcbf3aabebe6484fb6d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

PsGetCurrentProcessId
KeGetCurrentThread
KeDelayExecutionThread
ZwCreateEvent
RtlInitUnicodeString
RtlCompareUnicodeString
ExFreePool
IoAllocateIrp
ObfDereferenceObject
ExUnregisterCallback
IofCompleteRequest
KeSetEvent
IoDeleteDevice
KeBugCheckEx
KeTickCount
ZwSetValueKey
IoWMIRegistrationControl
KeSetTimer
RtlIntegerToUnicodeString
wcslen
RtlAppendUnicodeToString
IoCreateDevice
IoAttachDeviceToDeviceStack
IoOpenDeviceRegistryKey
ZwQueryValueKey
ZwClose
PoRequestPowerIrp
PoStartNextPowerIrp
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 640B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 896B - Virtual size: 790B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ