c55bd7782f965a0aee2dfe8f3ecd17c869f1981f30805a02909aae1dcc983d8b

General

Target

c55bd7782f965a0aee2dfe8f3ecd17c869f1981f30805a02909aae1dcc983d8b
Size

8KB
MD5

6cb6b17cd861555aa00705c56b808b68
SHA1

0200e204aa5fb17a9b9f3c1140436123513b829f
SHA256

c55bd7782f965a0aee2dfe8f3ecd17c869f1981f30805a02909aae1dcc983d8b
SHA512

4f2efba526da614e4053243f3ca6ee69165d8684708999189b74c60103a789c7acc6dc6c0a9843de3355a37ea0caa7cf3a892ae43f240356de4deaf7bf607c1c
SSDEEP

96:ljbKSSfQlU4zRU4HwAx+vTEeZHVoqLDuZPfTRD8WF+2Dns4rK+Un:ljafQlU4z64QJItwqN2WF+iaV

Score

N/A

Malware Config

Signatures

Files

c55bd7782f965a0aee2dfe8f3ecd17c869f1981f30805a02909aae1dcc983d8b
.exe windows x86

8702739d14eb968f839cc0d2a4037687

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

PsLookupProcessByProcessId
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
ExFreePool
ZwClose
ZwSetValueKey
wcslen
ZwCreateKey
RtlAppendUnicodeToString
RtlCopyUnicodeString
RtlInitUnicodeString
ExAllocatePoolWithTag
IofCompleteRequest
IoDeleteDevice
IoDetachDevice
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
KeInitializeEvent
IoCreateDevice
InterlockedDecrement
MmUnmapViewOfSection
KeWaitForSingleObject
IofCallDriver
InterlockedIncrement
IoIsWdmVersionAvailable
RtlFreeUnicodeString
IoSetDeviceInterfaceState
PoCallDriver
PoStartNextPowerIrp
InterlockedExchange
KeClearEvent
KeInitializeSpinLock
_except_handler3
KeAttachProcess
ZwTerminateProcess
KeSetEvent
KeDetachProcess

hal

KfReleaseSpinLock
KfAcquireSpinLock

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 896B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 518B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8702739d14eb968f839cc0d2a4037687

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 3KB - Virtual size: 3KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 896B - Virtual size: 888B

.reloc Size: 640B - Virtual size: 518B

.text
Size: 3KB - Virtual size: 3KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 896B - Virtual size: 888B

.reloc
Size: 640B - Virtual size: 518B