f3e6a7c9e8b7dfd85aa8dd7fa9a7215ed1870e81f51a10f21f600c1cbf2e1f9e

Sharing

Copy URL Twitter E-mail

General

Target

f3e6a7c9e8b7dfd85aa8dd7fa9a7215ed1870e81f51a10f21f600c1cbf2e1f9e
Size

76KB
MD5

6da0cab64d3a3ced645a04218ff7b05b
SHA1

c0b4e653b7867d6699a4e4440aa32775ad6b654f
SHA256

f3e6a7c9e8b7dfd85aa8dd7fa9a7215ed1870e81f51a10f21f600c1cbf2e1f9e
SHA512

ee410b35da4d7c6ee82b98cf66b53b6c9c33bc324d3177bec37326c6338e1835302149ccddcd52730f9924807717d1dc25588e14a47ba4d4468c45be34337aa2
SSDEEP

1536:Mkux+pJGCuqjoG7a91vK+ohOA06CbK9RsMDt11x:MkXGCuqR7aPwfCyzDt1

Score

N/A

Malware Config

Signatures

Files

f3e6a7c9e8b7dfd85aa8dd7fa9a7215ed1870e81f51a10f21f600c1cbf2e1f9e
.dll windows x86

60f15e902fccf1d6c113935400e93e4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

MmIsAddressValid
RtlCreateUnicodeString
RtlEqualUnicodeString
RtlInitString
ZwDeviceIoControlFile
RtlCompareUnicodeString
KeSetTimer
IoConnectInterrupt
RtlInitUnicodeString
RtlInitializeGenericTable
PsGetCurrentProcess
RtlInitAnsiString
IoFreeMdl
IoWriteErrorLogEntry
RtlEqualString
IoAllocateController
RtlUpcaseUnicodeChar
RtlxUnicodeStringToAnsiSize

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dir
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ahelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdat
Size: 1024B - Virtual size: 721B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

60f15e902fccf1d6c113935400e93e4e

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 40KB

.idat Size: 512B - Virtual size: 76B

.idata Size: 1024B - Virtual size: 528B

.dir Size: 512B - Virtual size: 28B

.ihelp Size: 512B - Virtual size: 140B

.ahelp Size: 512B - Virtual size: 140B

.init Size: 10KB - Virtual size: 9KB

.vdat Size: 1024B - Virtual size: 721B

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 404B

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 40KB

.idat
Size: 512B - Virtual size: 76B

.idata
Size: 1024B - Virtual size: 528B

.dir
Size: 512B - Virtual size: 28B

.ihelp
Size: 512B - Virtual size: 140B

.ahelp
Size: 512B - Virtual size: 140B

.init
Size: 10KB - Virtual size: 9KB

.vdat
Size: 1024B - Virtual size: 721B

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 404B