aca0788dc107b552f4a4988c451e25d8d71880395f2463120e01ac1aecc3ab32

General

Target

aca0788dc107b552f4a4988c451e25d8d71880395f2463120e01ac1aecc3ab32
Size

34KB
MD5

46e8dc95131c0311f60b8677c061f0fb
SHA1

d15cca257d8de0a0c714fbb6fb572cec5ccbab62
SHA256

aca0788dc107b552f4a4988c451e25d8d71880395f2463120e01ac1aecc3ab32
SHA512

23d5d32c3ace1087de63e47fc428f343ae686b2f481300a4d9c0f9e57e4879a3ea67cdc0869e6b5614727145feaaa7302040e6868bbc60393b17cfe21cf0e535
SSDEEP

768:tHZAtctRf+WEif5vffUPQaEjwQ7l3boe0UUw:tOWrf5v3UPQT0WBn0

Score

N/A

Malware Config

Signatures

Files

aca0788dc107b552f4a4988c451e25d8d71880395f2463120e01ac1aecc3ab32
.exe windows x86

086c9c4eb3fec2134fab95771b37a091

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwSetInformationFile
wcscpy
wcslen
ZwOpenFile
RtlInitUnicodeString
PsLookupProcessByProcessId
NtBuildNumber
IofCompleteRequest
IoDeleteDevice
PsSetCreateProcessNotifyRoutine
_except_handler3
ZwWriteFile
ZwCreateFile
ExFreePoolWithTag
ExAllocatePoolWithTag
ZwSetValueKey
wcscat
wcsncpy
ZwOpenKey
ZwCreateKey
IoCreateSymbolicLink
IoRegisterShutdownNotification
IoCreateDevice
wcsncat
MmIsAddressValid
ObReferenceObjectByName
IoDriverObjectType
KeInitializeMutex
KeReleaseMutex
KeWaitForSingleObject
ProbeForRead
ObfDereferenceObject
ObQueryNameString
ObReferenceObjectByHandle
ZwDeleteValueKey
ZwEnumerateValueKey
ZwEnumerateKey
KeServiceDescriptorTable
PsTerminateSystemThread
KeDelayExecutionThread
PsCreateSystemThread
KeTickCount
KeBugCheckEx

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 149B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 896B - Virtual size: 802B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

086c9c4eb3fec2134fab95771b37a091

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 384B - Virtual size: 372B

.data Size: 256B - Virtual size: 149B

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 21KB - Virtual size: 21KB

.reloc Size: 896B - Virtual size: 802B

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 384B - Virtual size: 372B

.data
Size: 256B - Virtual size: 149B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 21KB - Virtual size: 21KB

.reloc
Size: 896B - Virtual size: 802B