cf82ba3992e33b4d76b454b4fdced454ab30b58b721755797e3aeee24fd3be90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf82ba3992e33b4d76b454b4fdced454ab30b58b721755797e3aeee24fd3be90
Size

2KB
MD5

3db5d4c67b99004ca1218a5ebe72e389
SHA1

7bf5045321139a14ae750b57893e7cf68cc701a6
SHA256

cf82ba3992e33b4d76b454b4fdced454ab30b58b721755797e3aeee24fd3be90
SHA512

1b3fafae6d485d1e0f9976e3210963404d30d1cbfc6cf82f15ba32a5093508d169b9e8857b265b9d6dbf8b262b6fec55bcd81832cf5c1d4743561d84b9485dd9

Score

N/A

Malware Config

Signatures

Files

cf82ba3992e33b4d76b454b4fdced454ab30b58b721755797e3aeee24fd3be90
.exe windows x86

5dee25ddfcd69e922cd7531e5577c329

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
ExFreePoolWithTag
ZwQuerySystemInformation
ExAllocatePoolWithTag
ZwCreateFile
RtlInitUnicodeString
ZwQueryInformationFile
ZwReadFile
ZwClose
KeServiceDescriptorTable
wcslen
strrchr
wcscpy
_except_handler3

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 202B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 376B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ