be289dd93c84f4a5a086a8efab1ec804cf097c057874b92089a7556ab55e8591 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be289dd93c84f4a5a086a8efab1ec804cf097c057874b92089a7556ab55e8591
Size

21KB
MD5

33b816efe94c57d26dd4258b681b6947
SHA1

dd00527642448c8d03e35587bcdeb20ca7f8eefe
SHA256

be289dd93c84f4a5a086a8efab1ec804cf097c057874b92089a7556ab55e8591
SHA512

0d936d0aedd94a0bd02b8038fb1a672e506cc49eba2ddd2d8557511da75d47d2215e25db5cb9370320899a67b5223c7abf7ddec2b9863bff1247a2111fb749ce
SSDEEP

384:SVX8hohewolAJhcd4IV3RtsQB72sCcM1sp257x+5cZ:SVgohewNCZV3DsQB7ZrMspcF

Score

N/A

Malware Config

Signatures

Files

be289dd93c84f4a5a086a8efab1ec804cf097c057874b92089a7556ab55e8591
.exe windows x86

c36c36be183bc0313b1c98e99274ead0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
IoCreateSymbolicLink
KeServiceDescriptorTable
IoCreateDevice
ExAllocatePoolWithTag
wcscmp
NtBuildNumber
ZwSetValueKey
ZwOpenKey
_except_handler3

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 640B - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 384B - Virtual size: 338B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 384B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ