4bd64c00afe7d8a679a798e77add88e55b2c0cbe5ae74961418d7ccdf328d594

Sharing

Copy URL Twitter E-mail

General

Target

4bd64c00afe7d8a679a798e77add88e55b2c0cbe5ae74961418d7ccdf328d594
Size

20KB
MD5

6ed1caf8646deb6e0e2853c2d7df6106
SHA1

b0f300109ba58ac7096225c6a7bd7c32986483fd
SHA256

4bd64c00afe7d8a679a798e77add88e55b2c0cbe5ae74961418d7ccdf328d594
SHA512

5929be09bbc5290f300f3404270cc335725b670d950210cfc4d8fdc90b1ad9775f0643c67daac00012d5dda36e49a58d265af078cb9bb637c348260361d4ff4e
SSDEEP

384:SJykn8Ppcx7l8HsH3zKRaWc9fhy/j/NJnrW7uT+quEOjBMu:SJykn8Be7l8QKc9py/jlBrezMu

Score

N/A

Malware Config

Signatures

Files

4bd64c00afe7d8a679a798e77add88e55b2c0cbe5ae74961418d7ccdf328d594
.exe windows x86

c2812d185510d3ee04fd0fe4fa972c1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoCancelIrp
ExQueueWorkItem
IoFreeIrp
memcpy
IoDetachDevice
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
memset
KeSetEvent
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
RtlCompareUnicodeString
ZwClose
KeQueryInterruptTime
ObReferenceObjectByHandle
IoFileObjectType
ZwCreateFile
InterlockedDecrement
InterlockedIncrement
PoCallDriver
PoStartNextPowerIrp
ExFreePool
ObfDereferenceObject
IoAllocateIrp
ObfReferenceObject
RtlCopyUnicodeString
ExAllocatePoolWithTag
IoGetDeviceInterfaces
IoRegisterPlugPlayNotification
KeTickCount
KeBugCheckEx
IofCallDriver
IofCompleteRequest
IoGetRelatedDeviceObject
KeInitializeEvent

hal

ExReleaseFastMutex
ExAcquireFastMutex

battc.sys

BatteryClassStatusNotify
BatteryClassIoctl
BatteryClassInitializeDevice

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 289B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 380B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c2812d185510d3ee04fd0fe4fa972c1b

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

battc.sys

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 384B - Virtual size: 289B

.data Size: 128B - Virtual size: 16B

PAGE Size: 3KB - Virtual size: 2KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 384B - Virtual size: 380B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 384B - Virtual size: 289B

.data
Size: 128B - Virtual size: 16B

PAGE
Size: 3KB - Virtual size: 2KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 384B - Virtual size: 380B