cfd154c85faedb4923a35cb0b05ab79531cd3d347ea90094dcced69dec22f2ff

General

Target

cfd154c85faedb4923a35cb0b05ab79531cd3d347ea90094dcced69dec22f2ff
Size

41KB
MD5

5dc04c21c47c53891edcf93a16760b37
SHA1

b298803deca9277790ccae9d87eadf62676cba42
SHA256

cfd154c85faedb4923a35cb0b05ab79531cd3d347ea90094dcced69dec22f2ff
SHA512

ff0a60be81b990c880fe0be3a2b396be6c474339d700a847a8b843a9b290f91fc12d2de7d12c08f316d15a7c8b4964bc23a9a5546d9e6fd754b524216435d7f9
SSDEEP

768:bGD+XIaDqDTAIkaPYlTlSWMFuG3BqCHGAS9W8LX07khdMuY8X5p7Rww:Y+YaDqHiZlf6uGxqCmE8KF+JZiw

Score

N/A

Malware Config

Signatures

Files

cfd154c85faedb4923a35cb0b05ab79531cd3d347ea90094dcced69dec22f2ff
.dll windows x86

50464d7d5211d1ec1076d268a7ed90c5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlWalkFrameChain
RtlNumberGenericTableElements
RtlGetElementGenericTable
ExFreePoolWithTag
ExAllocatePool
RtlLookupElementGenericTable
IoAttachDevice
IoAllocateMdl
RtlIsGenericTableEmpty
ZwOpenEvent
KeClearEvent
RtlCreateHeap
VerSetConditionMask
RtlFreeHeap
RtlInitUnicodeString
KeSetEvent
RtlDestroyHeap
KeInitializeEvent
RtlFreeUnicodeString
RtlAllocateHeap
ZwQueryVolumeInformationFile
KeWaitForSingleObject
ZwOpenProcess
ZwTerminateProcess
RtlxUnicodeStringToOemSize
memcpy
memset

Exports

Exports

_SetOnReceive@8

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50464d7d5211d1ec1076d268a7ed90c5

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 132B

.data Size: - Virtual size: 4B

.edata Size: 512B - Virtual size: 80B

INIT Size: 1024B - Virtual size: 720B

.rsrc Size: 34KB - Virtual size: 34KB

.reloc Size: 512B - Virtual size: 172B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 132B

.data
Size: - Virtual size: 4B

.edata
Size: 512B - Virtual size: 80B

INIT
Size: 1024B - Virtual size: 720B

.rsrc
Size: 34KB - Virtual size: 34KB

.reloc
Size: 512B - Virtual size: 172B