d4ca0dbb2663b286b2fad33008b5afe6ef9a418fec1bf2c0d816a7f102ce492e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d4ca0dbb2663b286b2fad33008b5afe6ef9a418fec1bf2c0d816a7f102ce492e
Size

3KB
MD5

fcb8d6bbbbe9a88bd7d021a039e027fc
SHA1

5edd01cb722ffc8fd6988fa827cf925c261f8030
SHA256

d4ca0dbb2663b286b2fad33008b5afe6ef9a418fec1bf2c0d816a7f102ce492e
SHA512

d6a1fc62a2042f53b928a299330d6f55a8fb56f83a4b8035e47d7652c369e30a1419afa888addd5fd556481c55bcefb9742faccbba1d634c1f70e54094ddae38

Score

N/A

Malware Config

Signatures

Files

d4ca0dbb2663b286b2fad33008b5afe6ef9a418fec1bf2c0d816a7f102ce492e
.exe windows x86

d44ede785881c8646327e5a077c4f9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
_except_handler3

Sections

.text
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ