24593330b1ed5811be5569a5d6d2e9e0619d51030413bbfda6163e8ef6ce2f92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24593330b1ed5811be5569a5d6d2e9e0619d51030413bbfda6163e8ef6ce2f92
Size

181KB
MD5

f89236aa4e0690706c26b051014fec20
SHA1

4b29ac62e1010d068919c97df9f2e99544a92ca9
SHA256

24593330b1ed5811be5569a5d6d2e9e0619d51030413bbfda6163e8ef6ce2f92
SHA512

7bb96d48747cdf0ea112d19137bba7d6fcc64abcf74df763d72a0cfc753434fab984610a6b049d6e75acf9fbde1ae968ebd5eee8229e934ad0b962de9306edab
SSDEEP

3072:WTF0qoRjDDj8pGKUWx0M3y8FbYNq304gJ4eyTwRFsN+msn8REcitf0+R3TKEUx42:m0/f8p4Wx0MHbY89gJ4JM8REztfDRDEM

Score

N/A

Malware Config

Signatures

Files

24593330b1ed5811be5569a5d6d2e9e0619d51030413bbfda6163e8ef6ce2f92
.dll windows x86

708069b6d843fc4f673c6aa377569269

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoThreadToProcess
IoSetShareAccess
IoIsSystemThread
MmUnmapReservedMapping
IoReportResourceForDetection
WRITE_REGISTER_ULONG
WRITE_REGISTER_BUFFER_UCHAR
KeSetEvent
swprintf
IoCreateFile
RtlTimeFieldsToTime
IoGetDeviceObjectPointer
ExAcquireResourceSharedLite
RtlGUIDFromString
KeQueryTimeIncrement
RtlLengthSecurityDescriptor
ZwQueryKey

Sections

.text
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE