bf469972dac794aa927fc3b706cd563e0599f709c7d20a4d512f810b449807c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bf469972dac794aa927fc3b706cd563e0599f709c7d20a4d512f810b449807c7
Size

4KB
MD5

ec5a94538b0fc5a707749303345333b1
SHA1

95f662f68aa4f724daaac8aefa332e829fce535b
SHA256

bf469972dac794aa927fc3b706cd563e0599f709c7d20a4d512f810b449807c7
SHA512

18af3b0e84133715537864f47c599965df6eaec8ef5f0783285b86f8271389110018f511f7162dc9a3993dfe5feccde64fcdea7c8779430dcd433966ec00dac8
SSDEEP

96:Xlbo+TZhMTI/RjO46lR+ec+tvO4wpacX8/V/lnJBJK/w/sw39m:XacZhCWRCR1mayMdJbB/swt

Score

N/A

Malware Config

Signatures

Files

bf469972dac794aa927fc3b706cd563e0599f709c7d20a4d512f810b449807c7
.exe windows x86

cdab88fe925b8651fe8f34e7ff86924f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
IoGetDeviceObjectPointer
IoRegisterDriverReinitialization
ObDereferenceObject
ObReferenceObjectByHandle
ObReferenceObjectByName
ZwAccessCheckAndAuditAlarm
ZwClose
ZwOpenDirectoryObject
MmUserProbeAddress
KeServiceDescriptorTable
IoDriverObjectType
DbgPrint
IofCompleteRequest

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 704B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 544B - Virtual size: 520B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 160B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ