d42ac246b6c840a987d338f9646b3bf76eb77ef76b70f39f2d30f7f6c2011874 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d42ac246b6c840a987d338f9646b3bf76eb77ef76b70f39f2d30f7f6c2011874
Size

22KB
MD5

d31e37e2b511545cd88cec08608d70ea
SHA1

d205da37092b644fc27cc8679ff89b3848a1ddf4
SHA256

d42ac246b6c840a987d338f9646b3bf76eb77ef76b70f39f2d30f7f6c2011874
SHA512

98f306547f0113c97b8970afc68229923a2344b3735c7bfa78442af4b96cd97b4b51ebb6c56e84a258b508f9c1ef1f86c47182c3435479b0dc7ac20c8de46c27
SSDEEP

384:WjiQj0Em5aLRoYSpb1r5Q6iPbPsrG1DbmtIq3IYnK0yFFl1jHXGNZQlQPivYOQ63:+4EVL6Vry6iHDattdK1FY5PT6O

Score

N/A

Malware Config

Signatures

Files

d42ac246b6c840a987d338f9646b3bf76eb77ef76b70f39f2d30f7f6c2011874
.exe windows x86

5b59f549a2cbf7950b9996d7d17b1011

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

MmIsAddressValid
ZwClose
ZwUnmapViewOfSection
PsSetCreateProcessNotifyRoutine
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
ZwCreateFile
IoRegisterDriverReinitialization
_snprintf
ExFreePool
ExAllocatePoolWithTag
ZwQuerySystemInformation
ZwMapViewOfSection
ZwCreateSection
ZwOpenFile
strncmp
IoGetCurrentProcess
_wcsnicmp
wcslen
ZwSetValueKey
ZwOpenKey
ZwEnumerateKey
RtlAnsiStringToUnicodeString
PsGetVersion
_wcslwr
wcsncpy
swprintf
KeDelayExecutionThread
ZwCreateKey
wcscat
wcscpy
PsTerminateSystemThread
PsCreateSystemThread
_stricmp
strncpy
PsLookupProcessByProcessId
KeInitializeTimer
IofCompleteRequest

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 960B - Virtual size: 958B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 640B - Virtual size: 614B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ