54e602bb9969282a6d6ad48ada831f9d | Triage

Sharing

General

Target

54e602bb9969282a6d6ad48ada831f9d
Size

10KB
MD5

54e602bb9969282a6d6ad48ada831f9d
SHA1

b0a4736e432ac5180c20fcfee2fcc0c5560a6430
SHA256

877e0d2e0df2d39a98cf64da3b3b0bd2acbdfde47210974bbaa1690444074d46
SHA512

b06ef33fb2b0cec8ef5b346519b1dfaa3d2434f8e9c28f81abafc7c7e4ff200a275c78aa7be88539384851442baf2f1a086c26eb997b86b8879f3a0421395bc1
SSDEEP

192:iibHP+UuLYkgdEywVuT3HI+rXoEg2UudMBsTd/fQz0awybTwR:9HP+UCgOyEuT3HP8EwEfgwyvwR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54e602bb9969282a6d6ad48ada831f9d

Files

54e602bb9969282a6d6ad48ada831f9d
.sys windows:4 windows x86 arch:x86

e3869a14b2362ed2d955f04ee099222e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwCreateFile
MmGetSystemRoutineAddress
ZwDeleteFile

hal

HalHandleNMI

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ