9b18249a22f698264defcd938460a33f3fe75fc9a217ca15b907e91e819404c2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9b18249a22f698264defcd938460a33f3fe75fc9a217ca15b907e91e819404c2
Size

7KB
MD5

b7c44e6b9872b54b0765847c8088b084
SHA1

0c931f78b0f15d7c27ebabee0a8f9752f9ff7b0d
SHA256

9b18249a22f698264defcd938460a33f3fe75fc9a217ca15b907e91e819404c2
SHA512

909d9ece9c2abbe4afd9a8ffbc1c1d838a520cc2336a79eccab2e814325eb9f88da9a88d395fb8c0b5f97f2939af85e3842ce68cb0bccdbb03881b3c7cbef1da
SSDEEP

96:Dja5sxZ0oRc1pRTtg1VmpAMzpD9Z5u3Y:K5stOpRTWj+ppuI

Score

N/A

Malware Config

Signatures

Files

9b18249a22f698264defcd938460a33f3fe75fc9a217ca15b907e91e819404c2
.exe windows x86

eec808b71158ea85e48fd1cddce7b8e9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

DbgPrint
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
IofCompleteRequest
KeServiceDescriptorTable
IoCreateSymbolicLink
IoIsWdmVersionAvailable
IoCreateDevice
KeTickCount
RtlUnwind
KeBugCheckEx

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 412B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ