3e80783bd88c665240b05fe6c23d91d8 | Triage

Sharing

General

Target

3e80783bd88c665240b05fe6c23d91d8
Size

5KB
MD5

3e80783bd88c665240b05fe6c23d91d8
SHA1

d5b795506022e50798076356f8b7459f05090c75
SHA256

e6e8a9ecc93f68c2eb4c67c9edc6848fc621f84d9e2131c765950f36529616ae
SHA512

77c8f6cb9c6726af79c9c3f85d4ce9406a17c04397e17331e1810e5cf902ea4d7ab18b0429033cb7a33eabf50db48fbf5e2b6f77a4754e120d6baac150553861
SSDEEP

24:etGSMLiztlD4j6TvMRiRiOFR7RLsC/QWkAmrMa4VvmiuVvmiLlSVvmiL9VvmilVJ:6MLww6iicsVRb/l5qY0J/TUnG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3e80783bd88c665240b05fe6c23d91d8

Files

3e80783bd88c665240b05fe6c23d91d8
.sys windows:6 windows x86 arch:x86

36c05033539754118c1663260320b125

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwDeleteKey
ZwOpenKey
RtlInitUnicodeString
memset
KeTickCount
KeBugCheckEx
ZwClose

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 266B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 98B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ