f917799e8b5ae1c26205017452655a1c315b0162fba6a0ad2dca7affb135d4fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f917799e8b5ae1c26205017452655a1c315b0162fba6a0ad2dca7affb135d4fe
Size

3KB
MD5

d8ae6300b3c064efeea89e593a128cc3
SHA1

e616e8a5ecce92b5f776668157e31288129d67b9
SHA256

f917799e8b5ae1c26205017452655a1c315b0162fba6a0ad2dca7affb135d4fe
SHA512

b1280529ed35f8e22e362b1afbdff529ee6023b81071f3df552f2bb3026a1e99e20de121a48baf2d4f543b1b214415dae394e05506946575526a876fd7823097

Score

N/A

Malware Config

Signatures

Files

f917799e8b5ae1c26205017452655a1c315b0162fba6a0ad2dca7affb135d4fe
.exe windows x86

1998aca74a0f2c4e084029ce8d44c313

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
KeGetCurrentThread
DbgPrint
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
IoCreateSymbolicLink
IoCreateDevice
NtBuildNumber
KeServiceDescriptorTable
ZwQuerySystemInformation

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 338B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ