aa57bef5c6338c85ef15d1c83e066043 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa57bef5c6338c85ef15d1c83e066043
Size

34KB
MD5

aa57bef5c6338c85ef15d1c83e066043
SHA1

da43f506b8d63df325a21e0409f52003f394026d
SHA256

1c6e6272523dfe7314b62a637071f64f20982323932a8e35cbb3fbed4fdeb8bf
SHA512

1e21f9c82186f854bbf244539e77746553fd88de3a66cdbb748f861c1cad86e941cca236da967e12074c589cf915f34115cf2e691bfd8df60fbf047f73707551
SSDEEP

768:nfRblV/+7HH5JKjNeGXBoPo2afIQa4Ar1vyjdpcZWMPq+:nfRb7G2eG+ZQaf1vyjdpCWMi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa57bef5c6338c85ef15d1c83e066043

Files

aa57bef5c6338c85ef15d1c83e066043
.dll windows:4 windows x86 arch:x86

2ea0677b19d8af7b5913998347e66057

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

ZwDeleteFile
ZwOpenFile
MmGetSystemRoutineAddress

hal

HalDisplayString
KeRaiseIrql

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ