52a2e33839b2956dd7d1c399fd3f95bf345b2c062bdd3eea907562818b44e4ab

Sharing

Copy URL Twitter E-mail

General

Target

52a2e33839b2956dd7d1c399fd3f95bf345b2c062bdd3eea907562818b44e4ab
Size

135KB
MD5

60e23c98a3d29995e205c61522ab1fcc
SHA1

fb2b09eb0a360cba1c5bfbc8bbd659fc14c69f2e
SHA256

52a2e33839b2956dd7d1c399fd3f95bf345b2c062bdd3eea907562818b44e4ab
SHA512

475566b0d588d7549e84fe9b029395597741e418bd8a3aa54b7c536d583a203ad3d7d380c0dd571013a939db324e41809600d324717f50e95ba9cb90f3e13931
SSDEEP

3072:BO96L/2Q/fWkzIQwqWU7ZEAi0Gv7YHZE76VCLFUSbSES:49w/2Q/f1WU7Zpi5YHaVLan

Score

N/A

Malware Config

Signatures

Files

52a2e33839b2956dd7d1c399fd3f95bf345b2c062bdd3eea907562818b44e4ab
.dll windows x86

68d5363b898cddeb7bcbeee947e32c04

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

SeQueryInformationToken
KeInitializeDeviceQueue
ExReleaseResourceLite
IoConnectInterrupt
KeRemoveEntryDeviceQueue
IoAllocateIrp
MmBuildMdlForNonPagedPool
IoMakeAssociatedIrp
RtlDowncaseUnicodeString
RtlxUnicodeStringToAnsiSize
MmMapLockedPagesSpecifyCache
RtlInitString
FsRtlFreeFileLock
IoInvalidateDeviceRelations
SeSinglePrivilegeCheck
ZwDeviceIoControlFile
RtlEqualUnicodeString
RtlEqualString
RtlSetDaclSecurityDescriptor
RtlInitUnicodeString

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 634B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dir
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ahelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdat
Size: 512B - Virtual size: 261B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68d5363b898cddeb7bcbeee947e32c04

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 40KB

.idat Size: 512B - Virtual size: 84B

.idata Size: 1024B - Virtual size: 634B

.dir Size: 512B - Virtual size: 28B

.ihelp Size: 512B - Virtual size: 140B

.ahelp Size: 512B - Virtual size: 140B

.init Size: 10KB - Virtual size: 9KB

.vdat Size: 512B - Virtual size: 261B

.rsrc Size: 22KB - Virtual size: 21KB

.reloc Size: 512B - Virtual size: 496B

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 40KB

.idat
Size: 512B - Virtual size: 84B

.idata
Size: 1024B - Virtual size: 634B

.dir
Size: 512B - Virtual size: 28B

.ihelp
Size: 512B - Virtual size: 140B

.ahelp
Size: 512B - Virtual size: 140B

.init
Size: 10KB - Virtual size: 9KB

.vdat
Size: 512B - Virtual size: 261B

.rsrc
Size: 22KB - Virtual size: 21KB

.reloc
Size: 512B - Virtual size: 496B