da9a7540e975410958482931d1134a9db3dbcb59d6315623fc8712c628507e59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da9a7540e975410958482931d1134a9db3dbcb59d6315623fc8712c628507e59
Size

1KB
MD5

f7b614e6be654277328296e36b15eefe
SHA1

f4e965aa725379595e36fe78c2647cb89418fc80
SHA256

da9a7540e975410958482931d1134a9db3dbcb59d6315623fc8712c628507e59
SHA512

9e95b6f81252463e5e7eb81de6194b06cbeedeb7be4b2976ed2c51296740e9186873bdfaa0f9d4942101fbfb5a85a0c79f51116efce802f31929f90141261b4f

Score

N/A

Malware Config

Signatures

Files

da9a7540e975410958482931d1134a9db3dbcb59d6315623fc8712c628507e59
.exe windows x86

b3bac79ef7d9da7819b2211a8a780502

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteSymbolicLink
IofCompleteRequest
KeServiceDescriptorTable
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
IoDeleteDevice

Sections

.text
Size: 352B - Virtual size: 347B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 256B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ