f2afdd58d82a8068b7a6f170f82455c31e8136b5c6a7bda269cfabb8af9e1db6

Sharing

Copy URL Twitter E-mail

General

Target

f2afdd58d82a8068b7a6f170f82455c31e8136b5c6a7bda269cfabb8af9e1db6
Size

183KB
MD5

65f98cf285f5607e8841ea0110e02b59
SHA1

87afa93e1fd3485a9a9eb127be6f9ee4c0f5fe0e
SHA256

f2afdd58d82a8068b7a6f170f82455c31e8136b5c6a7bda269cfabb8af9e1db6
SHA512

c1fc875680736613273ab208297764631be521231cba6106a66d6388faab317388cd744bbb826395f589c6be386fac548c53b1ba15030a0884f38eb261bac8d7
SSDEEP

3072:dQJdtna3rt3HET7SP5hKT7uVW0egfexWlyK4yOTFO+HLJJedbVTQiJTfZl:d0I+HSP5qy4gACyZTFOELDqTJr

Score

N/A

Malware Config

Signatures

Files

f2afdd58d82a8068b7a6f170f82455c31e8136b5c6a7bda269cfabb8af9e1db6
.dll windows x86

a5cca3efcc23af9510463d85ffe89f87

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
PsTerminateSystemThread
RtlTimeFieldsToTime
IoCreateSynchronizationEvent
ExAllocatePoolWithTag
ExSystemTimeToLocalTime
RtlFindLeastSignificantBit
RtlUnicodeStringToAnsiString
KeReadStateSemaphore
RtlLengthSecurityDescriptor
ExLocalTimeToSystemTime
MmCanFileBeTruncated
RtlLengthRequiredSid
KeReleaseSemaphore
PsGetCurrentThread
PsLookupProcessByProcessId
RtlxAnsiStringToUnicodeSize
RtlUpcaseUnicodeToOemN
RtlEqualUnicodeString
KeSaveFloatingPointState
MmBuildMdlForNonPagedPool
KePulseEvent

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itab
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etab
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd1
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msd2
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd4
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5cca3efcc23af9510463d85ffe89f87

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 10KB - Virtual size: 9KB

.itab Size: 512B - Virtual size: 92B

.etab Size: 512B - Virtual size: 512B

.msd3 Size: 512B - Virtual size: 28B

.msd1 Size: 512B - Virtual size: 140B

.msd2 Size: 512B - Virtual size: 140B

.msd4 Size: 1024B - Virtual size: 636B

.data Size: 12KB - Virtual size: 52KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 640B

.text
Size: 10KB - Virtual size: 9KB

.itab
Size: 512B - Virtual size: 92B

.etab
Size: 512B - Virtual size: 512B

.msd3
Size: 512B - Virtual size: 28B

.msd1
Size: 512B - Virtual size: 140B

.msd2
Size: 512B - Virtual size: 140B

.msd4
Size: 1024B - Virtual size: 636B

.data
Size: 12KB - Virtual size: 52KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 640B