4d8e3c322f3ec3c9b7e3fcbe9de4efb3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d8e3c322f3ec3c9b7e3fcbe9de4efb3
Size

35KB
MD5

4d8e3c322f3ec3c9b7e3fcbe9de4efb3
SHA1

91b828fa818ec55336c18c4239fa6eb780203206
SHA256

8acb6ff781449db87d65c606fd750663d66f40711b030098d346b6f2c1143583
SHA512

bf4feaad9bb9c72f2bd80869e4d08af091c3b26c91674e3e96bad4de85aa071fd9dd75f0c8dd441f49b8d4e5f50d5e3d9702a94601ce0065d33dac63a137c52c
SSDEEP

768:fNm/8R2oc2+MTaORgGPQ5wzyxXoEVMHCq0z:fNU81v+MTa553Xo8mChz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d8e3c322f3ec3c9b7e3fcbe9de4efb3

Files

4d8e3c322f3ec3c9b7e3fcbe9de4efb3
.dll windows:4 windows x86 arch:x86

d2e4b629a9ed62398eda6720e5165584

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

hal

KeAcquireSpinLock
KfLowerIrql
HalMakeBeep
HalProcessorIdle

ntoskrnl.exe

IoCreateDevice
IoFreeIrp
KeUpdateRunTime

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ