b9caac4d310ee77c7b6c58ff5d2de8b38ce16850ba1e03cc1f5707626afc3b38

General

Target

b9caac4d310ee77c7b6c58ff5d2de8b38ce16850ba1e03cc1f5707626afc3b38
Size

19KB
MD5

619187a27d036e06ace130806b586e76
SHA1

67265e11d5bd3045ec97e5be8cdbd257cb9fe8c4
SHA256

b9caac4d310ee77c7b6c58ff5d2de8b38ce16850ba1e03cc1f5707626afc3b38
SHA512

3ab2468db2afd00dfbf2fca26ae401662264630c732c6297ddcf11d7b66d0695cf5f5425371ad55d15c44b58700782d1836609cc29e7c1b794ebe5175b27a2a0
SSDEEP

384:d8QdX0XvBpFuDidW7nI1SIDLM7xIlQLnJquKM7n:d70vsiEIfc3nJ7

Score

N/A

Malware Config

Signatures

Files

b9caac4d310ee77c7b6c58ff5d2de8b38ce16850ba1e03cc1f5707626afc3b38
.exe windows x86

228c38aa2cbc1ba7f1e0a2c1e574a0fc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_except_handler3
RtlInitUnicodeString
IoFreeMdl
MmUnmapLockedPages
MmMapLockedPages
MmBuildMdlForNonPagedPool
IoAllocateMdl
MmIsAddressValid
wcsstr
ExFreePoolWithTag
_wcslwr
wcsncat
wcscat
ObfDereferenceObject
ObQueryNameString
ObReferenceObjectByHandle
ExAllocatePoolWithTag
_local_unwind2
wcslen
_stricmp
ZwQuerySystemInformation
KeGetCurrentThread
PsGetCurrentProcessId
IofCompleteRequest
IoDeleteDevice
ZwNotifyChangeKey
ZwOpenKey
ZwClose
ZwSetValueKey
ZwCreateKey
KeServiceDescriptorTable
wcscpy
ObOpenObjectByName
KeInitializeSpinLock
IoCreateSymbolicLink
IoCreateDevice
wcsncpy
KeTickCount
KeBugCheckEx
RtlQueryRegistryValues
RtlAppendUnicodeToString

hal

KeGetCurrentIrql

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

228c38aa2cbc1ba7f1e0a2c1e574a0fc

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 13KB - Virtual size: 13KB

.rdata Size: 1024B - Virtual size: 1012B

.data Size: 1KB - Virtual size: 1KB

INIT Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 13KB - Virtual size: 13KB

.rdata
Size: 1024B - Virtual size: 1012B

.data
Size: 1KB - Virtual size: 1KB

INIT
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB