96cd238245035a75391d752f79faa36988520f0f53573bc679ed0f80d18c7a64

Sharing

Copy URL Twitter E-mail

General

Target

96cd238245035a75391d752f79faa36988520f0f53573bc679ed0f80d18c7a64
Size

135KB
MD5

675f9843d164e4cb17270aa05a0df679
SHA1

d3da9deb5f9053bf2c1569f767c61e7ff7044293
SHA256

96cd238245035a75391d752f79faa36988520f0f53573bc679ed0f80d18c7a64
SHA512

cebe9c38081cad24f2bc6cf282be04231c34636ba59be4cfbc1766f0b4c4aa30f4140fde30975a6ffe2867fde4572535c17f526d4cd6854630d09725482fe940
SSDEEP

3072:Kei+lDxJ09Z8WU7ZEAi0Gv7YHZE76VuLFUSfSEp:Kei+KL8WU7Zpi5YHaVLa7

Score

N/A

Malware Config

Signatures

Files

96cd238245035a75391d752f79faa36988520f0f53573bc679ed0f80d18c7a64
.dll windows x86

8875145393f69da43440a39cf50eea19

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

PsIsThreadTerminating
ExDeleteResourceLite
KeReadStateMutex
RtlInitUnicodeString
IoCreateSymbolicLink
MmIsAddressValid
RtlTimeToTimeFields
ExUuidCreate
RtlCompareUnicodeString
MmProbeAndLockPages
RtlEqualString
CcFastCopyRead
RtlInitString
KeQuerySystemTime
IoDeleteSymbolicLink
MmFreePagesFromMdl
RtlUnicodeStringToInteger
RtlFindSetBits
KeDeregisterBugCheckCallback
RtlOemStringToUnicodeString
MmCanFileBeTruncated
RtlEqualUnicodeString
RtlxUnicodeStringToOemSize
KeGetCurrentThread
RtlxUnicodeStringToAnsiSize

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itab
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etab
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd1
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msd2
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd4
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8875145393f69da43440a39cf50eea19

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 10KB - Virtual size: 9KB

.itab Size: 512B - Virtual size: 104B

.idata Size: 1024B - Virtual size: 736B

.etab Size: 512B - Virtual size: 512B

.msd3 Size: 512B - Virtual size: 28B

.msd1 Size: 512B - Virtual size: 140B

.msd2 Size: 512B - Virtual size: 140B

.msd4 Size: 1024B - Virtual size: 544B

.data Size: 1KB - Virtual size: 39KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 492B

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 10KB - Virtual size: 9KB

.itab
Size: 512B - Virtual size: 104B

.idata
Size: 1024B - Virtual size: 736B

.etab
Size: 512B - Virtual size: 512B

.msd3
Size: 512B - Virtual size: 28B

.msd1
Size: 512B - Virtual size: 140B

.msd2
Size: 512B - Virtual size: 140B

.msd4
Size: 1024B - Virtual size: 544B

.data
Size: 1KB - Virtual size: 39KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 492B