a0283f00d872a4b6b83365653653fef91ca9cbea3d4766e38f12ac08565c5986 | Triage

Sharing

General

Target

a0283f00d872a4b6b83365653653fef91ca9cbea3d4766e38f12ac08565c5986
Size

2KB
MD5

6b48539051e49cf603446fef9cabf870
SHA1

92ef72953a049a5f7295da25b0e573cc5ad60348
SHA256

a0283f00d872a4b6b83365653653fef91ca9cbea3d4766e38f12ac08565c5986
SHA512

dcf50ca46fa9babfa45708e88c95ceb1e33840bde35b0c92759c5f308443622e6e762da052c44c02ed739f478c4d02f18b6b7586b5636712a42036e95497810a

Score

N/A

Malware Config

Signatures

Files

a0283f00d872a4b6b83365653653fef91ca9cbea3d4766e38f12ac08565c5986
.exe windows x86

2da1cdc9ad414e8053a0fc719dbaddb9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
DbgPrint
_except_handler3
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
KeTickCount

Sections

.text
Size: 896B - Virtual size: 856B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 378B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ