2a3154df518666fbfd8b89e6ca182efb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a3154df518666fbfd8b89e6ca182efb
Size

36KB
MD5

2a3154df518666fbfd8b89e6ca182efb
SHA1

a78d28061d938d16fc6824dbcefb1c7518445445
SHA256

529c7af038f21a5e005d1b5334d4d7636f0f4f73a1e41b7b4cc649d9cef1ec8c
SHA512

b8a96d42239cc09d81b38df46f3c11b812a5b10d231dc4c6e32a8e8bacfc0c02d888b4675e9b6ae2bb045ae0a17b95ab3a97a460e7b09c7f3e9dc022e57352ac
SSDEEP

768:iAeD7zJNrhtbAd2+wiOu/Rb/cDgkhPbiFFg:izdNrhpkCu5b/cDgkZbi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a3154df518666fbfd8b89e6ca182efb

Files

2a3154df518666fbfd8b89e6ca182efb
.dll windows:4 windows x86 arch:x86

d2e4b629a9ed62398eda6720e5165584

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

hal

KeAcquireSpinLock
KfLowerIrql
HalMakeBeep
HalProcessorIdle

ntoskrnl.exe

IoCreateDevice
IoFreeIrp
KeUpdateRunTime

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE