8f81f62deb1ff3f64e10816848c3298acd250c772ee768e7f78d17bbc874a7a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f81f62deb1ff3f64e10816848c3298acd250c772ee768e7f78d17bbc874a7a2
Size

4KB
MD5

ccea80e592e260f06acbef46bb8dcb58
SHA1

81c2f0a01b2b94666b46f9d02399e84074efded7
SHA256

8f81f62deb1ff3f64e10816848c3298acd250c772ee768e7f78d17bbc874a7a2
SHA512

480804389bdd72708047027af8333f4f0c931d163ec1db6a6215db6aefa6d4d89dad63cd341deb84d4f0d6edf6a7f19f912d546732ae4444d54cf9055a8f38b1
SSDEEP

48:iWUCyeo4Nv0pn84cCCLkwe5RjIMbvMyuqYBj92tQibEx4QDmlw7Vqelqm6fyae6l:nro+Mp84+LkJCLi/krVC/w/sw39mZ

Score

N/A

Malware Config

Signatures

Files

8f81f62deb1ff3f64e10816848c3298acd250c772ee768e7f78d17bbc874a7a2
.exe windows x86

cdab88fe925b8651fe8f34e7ff86924f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
IoGetDeviceObjectPointer
IoRegisterDriverReinitialization
ObDereferenceObject
ObReferenceObjectByHandle
ObReferenceObjectByName
ZwAccessCheckAndAuditAlarm
ZwClose
ZwOpenDirectoryObject
MmUserProbeAddress
KeServiceDescriptorTable
IoDriverObjectType
DbgPrint
IofCompleteRequest

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 640B - Virtual size: 620B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 544B - Virtual size: 520B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 160B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ