76eb2e28e993398a0a9e71eeda3bcf86a877e7da47ea7d618054640015d5be94 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76eb2e28e993398a0a9e71eeda3bcf86a877e7da47ea7d618054640015d5be94
Size

4KB
MD5

a63b5d10ec54ef75280b4d7efc7800eb
SHA1

75bd7e708c85d76314ad1c58d0c6c5c7677e9cd8
SHA256

76eb2e28e993398a0a9e71eeda3bcf86a877e7da47ea7d618054640015d5be94
SHA512

072b9d88cff9d925621d251fac5901902a87e27ac759ae002132ce893a18d274c42414269c91fd45a94da9430ea5423fc2546f6ce757e82c6f43157858809016
SSDEEP

48:gcDei9w/X17Qt9vkIVENfI/bk3mQqvTHr+6Vi9Ouxm8lHiR+1TgCRjBBFd:RAX17Ovk/1IAmQauYpuxm80oLxH

Score

N/A

Malware Config

Signatures

Files

76eb2e28e993398a0a9e71eeda3bcf86a877e7da47ea7d618054640015d5be94
.exe windows x86

7c0df9cd67e194b03f336649d857276e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
_except_handler3
PsLookupProcessByProcessId
NtBuildNumber
IoCreateSymbolicLink
IoCreateDevice
ExFreePoolWithTag
ExAllocatePoolWithTag
ObReferenceObjectByName
IoDriverObjectType
KeTickCount

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ