53684b5e1e14dc0e3107f2c008e57778b8089c161afc53028ca4d609e96b0db5

Sharing

Copy URL Twitter E-mail

General

Target

53684b5e1e14dc0e3107f2c008e57778b8089c161afc53028ca4d609e96b0db5
Size

27KB
MD5

06a8c443af42eb4a746184560f96eee0
SHA1

54bfc0f9b7966b3b4d5b290f2fff018e03f03150
SHA256

53684b5e1e14dc0e3107f2c008e57778b8089c161afc53028ca4d609e96b0db5
SHA512

0620943608389529978471dd080bc6ac1b24919b86bc745ada60c96076ca70e38df7bb1e85e4d8f17078758abf1430a86b8f11a95d60a598baa83bdb1c2fc7bf
SSDEEP

384:YxtbSurrveEptIKv0PmKK4czIn3zrYn+deeCkzyoroOhFFiyFMB:YTb9rvjU+AmMc8n344XTy2fh/tFM

Score

N/A

Malware Config

Signatures

Files

53684b5e1e14dc0e3107f2c008e57778b8089c161afc53028ca4d609e96b0db5
.exe windows x86

374095e6782b89ee46c48ba80e2606ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlCopyUnicodeString
ExAllocatePoolWithTag
MmUnmapIoSpace
MmMapIoSpace
ZwClose
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
MmGetPhysicalAddress
ZwEnumerateKey
IoRegisterBootDriverReinitialization
RtlImageNtHeader
memcpy
ZwWriteFile
RtlRandomEx
ZwReadFile
ZwQueryFullAttributesFile
ZwCreateFile
KeTickCount
KeBugCheckEx
RtlUnwind
memset
ExFreePoolWithTag
MmGetSystemRoutineAddress
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation

hal

x86BiosCall

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

seg1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

seg2
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

374095e6782b89ee46c48ba80e2606ec

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 468B

.data Size: 512B - Virtual size: 80B

seg1 Size: 12KB - Virtual size: 12KB

seg2 Size: 512B - Virtual size: 32B

PAGE Size: 1024B - Virtual size: 614B

INIT Size: 1024B - Virtual size: 994B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 720B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 468B

.data
Size: 512B - Virtual size: 80B

seg1
Size: 12KB - Virtual size: 12KB

seg2
Size: 512B - Virtual size: 32B

PAGE
Size: 1024B - Virtual size: 614B

INIT
Size: 1024B - Virtual size: 994B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 720B