eb7e6a3ee26a72d30e0e42311bf4ac418d3435f274cabe190c257431b7545f4f | Triage

Sharing

General

Target

eb7e6a3ee26a72d30e0e42311bf4ac418d3435f274cabe190c257431b7545f4f
Size

1KB
MD5

81eee13ee31d9ca14a9a7c40563b520e
SHA1

9e46d6b6a662c67b5d538290358a678b8b08cd40
SHA256

eb7e6a3ee26a72d30e0e42311bf4ac418d3435f274cabe190c257431b7545f4f
SHA512

1f778ebdf58f470e09777b62e3e356e8fce423d2ae47b2e40fce414ab8539dcfee2f2ded8229dc2fadfc32692ad46553afce3ef5fc40fb0d06bafee5f758775b

Score

N/A

Malware Config

Signatures

Files

eb7e6a3ee26a72d30e0e42311bf4ac418d3435f274cabe190c257431b7545f4f
.exe windows x86

b3bac79ef7d9da7819b2211a8a780502

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteSymbolicLink
IofCompleteRequest
KeServiceDescriptorTable
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
IoDeleteDevice

Sections

.text
Size: 352B - Virtual size: 347B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 256B - Virtual size: 244B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 64B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ