270d1d3c7a3af8bab19502be01c6d78d | Triage

Sharing

General

Target

270d1d3c7a3af8bab19502be01c6d78d
Size

35KB
MD5

270d1d3c7a3af8bab19502be01c6d78d
SHA1

5f0fdc2aa2246b913927b322218710e191c741b0
SHA256

6ea2e0f39e39d44d7c5e270784cc0befa59f881fac70c3ad0b54480efa0b5cc8
SHA512

06b7804d86cf2638b101d1c99ab4f1f5709a9d692e4b37a107c486a3847954846669501fc6071cdd536c2c482ec461598007008eecb87e07eb0804141af1b78d
SSDEEP

768:nLkGRQYNwkJ5CV9ZnQq2ZQFjMaoywGAWZeC/HUj6bMrEeRyk:AGRQU/ClnAZWjMTGJHH96Ee

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
270d1d3c7a3af8bab19502be01c6d78d

Files

270d1d3c7a3af8bab19502be01c6d78d
.dll windows:4 windows x86 arch:x86

d2e4b629a9ed62398eda6720e5165584

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

hal

KeAcquireSpinLock
KfLowerIrql
HalMakeBeep
HalProcessorIdle

ntoskrnl.exe

IoCreateDevice
IoFreeIrp
KeUpdateRunTime

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ