d61ef3ea1d7422f9c97d15d4e7bb9ae6f615b9a94d57bf6ab3c8d84e2be6d857

Sharing

Copy URL Twitter E-mail

General

Target

d61ef3ea1d7422f9c97d15d4e7bb9ae6f615b9a94d57bf6ab3c8d84e2be6d857
Size

445KB
MD5

6052c475ce87921b23f792eaf1f9fc6e
SHA1

30bc0d64c2d05a0013d5a0eb4e8d9984018672c3
SHA256

d61ef3ea1d7422f9c97d15d4e7bb9ae6f615b9a94d57bf6ab3c8d84e2be6d857
SHA512

da8fa8c2b3017e278d00540147edc235817428ab29c120030b30cc2c682673f04ae19d1b19d6cd2406de3f02859bf8a27079dbe89736105a96bdde304bd6cad5
SSDEEP

12288:9SJEm/BtKy4LE4wxubJ2Li73ZpjgRdKWQ:99EiW/MbJ2LO3ZpkRIx

Score

N/A

Malware Config

Signatures

Files

d61ef3ea1d7422f9c97d15d4e7bb9ae6f615b9a94d57bf6ab3c8d84e2be6d857
.dll windows x86

dbbad9a0c7841dedd23aef1e05dad24b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
IoGetBootDiskInformation
MmUnlockPagableImageSection
RtlEqualUnicodeString
RtlUpcaseUnicodeString
RtlEnumerateGenericTable
RtlTimeToTimeFields
KeReleaseMutex
RtlxUnicodeStringToAnsiSize
PsTerminateSystemThread
RtlInitString
CcFastCopyRead
KeInitializeEvent
ZwDeleteValueKey
RtlCreateRegistryKey
RtlCheckRegistryKey
RtlEqualString
RtlxUnicodeStringToOemSize

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itab
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 554B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etab
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd1
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msd2
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd4
Size: 1024B - Virtual size: 713B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dbbad9a0c7841dedd23aef1e05dad24b

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 10KB - Virtual size: 9KB

.itab Size: 512B - Virtual size: 76B

.idata Size: 1024B - Virtual size: 554B

.etab Size: 512B - Virtual size: 512B

.msd3 Size: 512B - Virtual size: 28B

.msd1 Size: 512B - Virtual size: 140B

.msd2 Size: 512B - Virtual size: 140B

.msd4 Size: 1024B - Virtual size: 713B

.data Size: 1KB - Virtual size: 41KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 632B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 10KB - Virtual size: 9KB

.itab
Size: 512B - Virtual size: 76B

.idata
Size: 1024B - Virtual size: 554B

.etab
Size: 512B - Virtual size: 512B

.msd3
Size: 512B - Virtual size: 28B

.msd1
Size: 512B - Virtual size: 140B

.msd2
Size: 512B - Virtual size: 140B

.msd4
Size: 1024B - Virtual size: 713B

.data
Size: 1KB - Virtual size: 41KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 632B