f6f943036e6c0cad546248aab545a110492bdc1bfd815e8c01a21afa7b8f7107

Sharing

Copy URL Twitter E-mail

General

Target

f6f943036e6c0cad546248aab545a110492bdc1bfd815e8c01a21afa7b8f7107
Size

378KB
MD5

7949c3f86d7286d3b6ea87aa9e78f4e9
SHA1

78d6bb3968cad5654db5023dc121aaaaee93ca9f
SHA256

f6f943036e6c0cad546248aab545a110492bdc1bfd815e8c01a21afa7b8f7107
SHA512

38c33d67cfe04a994bd1232d76a6749e8a1267879c2fa2bce102b45dc8ddf32c584599f1921b723c09cf6a2eb166ce9792f9e7fb20645812c971ad6e864f2be1
SSDEEP

6144:zAsa/fbe0+k9kNIzk16ffkurOpbDIgFhXYWXMHJyUooBMpacpVnYrZVxWn60u3v9:zbHQ2KJPcniWgdQsyDS

Score

N/A

Malware Config

Signatures

Files

f6f943036e6c0cad546248aab545a110492bdc1bfd815e8c01a21afa7b8f7107
.dll windows x86

a582f282b30594014db0a2bd4bdfdbd6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDisconnectInterrupt
ObGetObjectSecurity
PsGetCurrentThread
RtlGetVersion
ExCreateCallback
RtlEqualString
RtlEqualUnicodeString
CcIsThereDirtyData
RtlxUnicodeStringToAnsiSize
ExUuidCreate
IoRequestDeviceEject
ZwQueryObject
ZwDeleteKey
IoIsWdmVersionAvailable
KeInitializeDeviceQueue
MmHighestUserAddress
RtlInitString
RtlInitUnicodeString
KeStackAttachProcess
RtlDowncaseUnicodeString
ExSetResourceOwnerPointer

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 606B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dir
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ahelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdat
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a582f282b30594014db0a2bd4bdfdbd6

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 12KB - Virtual size: 12KB

.data Size: 2KB - Virtual size: 40KB

.idat Size: 512B - Virtual size: 88B

.idata Size: 1024B - Virtual size: 606B

.dir Size: 512B - Virtual size: 28B

.ihelp Size: 512B - Virtual size: 140B

.ahelp Size: 512B - Virtual size: 140B

.init Size: 10KB - Virtual size: 9KB

.vdat Size: 512B - Virtual size: 510B

.rsrc Size: 21KB - Virtual size: 21KB

.reloc Size: 512B - Virtual size: 472B

.text
Size: 12KB - Virtual size: 12KB

.data
Size: 2KB - Virtual size: 40KB

.idat
Size: 512B - Virtual size: 88B

.idata
Size: 1024B - Virtual size: 606B

.dir
Size: 512B - Virtual size: 28B

.ihelp
Size: 512B - Virtual size: 140B

.ahelp
Size: 512B - Virtual size: 140B

.init
Size: 10KB - Virtual size: 9KB

.vdat
Size: 512B - Virtual size: 510B

.rsrc
Size: 21KB - Virtual size: 21KB

.reloc
Size: 512B - Virtual size: 472B