c51ab3a0ce1996ebd9c883963f685ac24f7619a8210e288509a2979212dbdf1d | Triage

Sharing

General

Target

c51ab3a0ce1996ebd9c883963f685ac24f7619a8210e288509a2979212dbdf1d
Size

2KB
MD5

6c7cdb662b597471483c3c16fa3efd3d
SHA1

784ee75c9c9f389fc5abc0883c054ea379a5ed2d
SHA256

c51ab3a0ce1996ebd9c883963f685ac24f7619a8210e288509a2979212dbdf1d
SHA512

6d55958abe5513588daa18f89c28edf9b9ec3652cc4f8618fbfb85d6e8e0acc544a8d53bde2d31b121b4ebee2bbefc21d35d0f2486dc00c52494178de62a545e

Score

N/A

Malware Config

Signatures

Files

c51ab3a0ce1996ebd9c883963f685ac24f7619a8210e288509a2979212dbdf1d
.exe windows x86

1e484aa476e511cfea3b69315ca5ad42

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
DbgPrint
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
_except_handler3
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
KeTickCount

Sections

.text
Size: 768B - Virtual size: 648B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 418B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ