7bf81250962848165b53c2a34c011760 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7bf81250962848165b53c2a34c011760
Size

28KB
MD5

7bf81250962848165b53c2a34c011760
SHA1

bec31efcaba47901105fd7a649325c2c5ff5b853
SHA256

d8786bc85f362590dfe637edd1bfd36420d94e2ed47f8910be3e5d95dea1d540
SHA512

8ddaf67afa0f329726a4f8d00b6933eb26d201881d1bc593a63989711089425def9d3e68516b980507e36c875d744b477286b90bedde4e05ab67c27964d5f3a7
SSDEEP

12:etGSGQEsXSEX0Obr8DMJicr3szd/ffAeCKtX9xplzdguN:etGSLCnOM36Ad/cKd/rBL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7bf81250962848165b53c2a34c011760

Files

7bf81250962848165b53c2a34c011760
.dll windows:4 windows x64 arch:x64

d9c9c4541168665f44917e3ddc4a00d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

DbgPrint

Exports

Exports

DriverDispatch
DriverEntry
DriverUnload

Sections

.text
Size: 4KB - Virtual size: 128B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 118B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE