b23264831ec5d3bc9744247ca12b0c4a4d3d8a3c7f8c9724e51fe1dcdc86318a

General

Target

b23264831ec5d3bc9744247ca12b0c4a4d3d8a3c7f8c9724e51fe1dcdc86318a
Size

135KB
MD5

4f8452ee24b136445e529f4aab03c197
SHA1

1dfe930a6d2ca94cc069f3eff87b3b10667badf7
SHA256

b23264831ec5d3bc9744247ca12b0c4a4d3d8a3c7f8c9724e51fe1dcdc86318a
SHA512

8bf5b8fd4f9846f7770685efd429d48f1ce2cf46b06eb20f04d0f8c3596cc89758bbf3f407912a925bf0d355aecfd392ecf1eaececca3942242276c9084eb522
SSDEEP

3072:Ungr4Zs1ca9sNBN9miReU7ZEAi0Gv7YHZE76VCLFUSbSES:Z4ZOamQeU7Zpi5YHaVLan

Score

N/A

Malware Config

Signatures

Files

b23264831ec5d3bc9744247ca12b0c4a4d3d8a3c7f8c9724e51fe1dcdc86318a
.exe windows x86

af1f4c6aa3ebc31a5523c0ffa0989a49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hal

KfReleaseSpinLock
KfLowerIrql
KfRaiseIrql
KeGetCurrentIrql
KfAcquireSpinLock

ntoskrnl.exe

_alldiv
SeDeassignSecurity
RtlFreeOemString
RtlUpcaseUnicodeStringToOemString
DbgPrint
RtlUpperChar
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlOemStringToUnicodeString
RtlInitString
MmMapLockedPagesSpecifyCache
RtlAppendStringToString
RtlInitAnsiString
strchr
strncpy
KeCancelTimer
ZwClose
ZwCancelTimer
ZwSetTimer
ZwCreateTimer
_aulldiv
_allmul
IofCompleteRequest
IofCallDriver
IoBuildDeviceIoControlRequest
ObfReferenceObject
IoGetDeviceObjectPointer
RtlInitUnicodeString
KeSetTimer
KeInitializeDpc
KeInitializeTimer
IoDeleteDevice
KeClearEvent
ExDeleteResourceLite
IoFreeIrp
IoGetRelatedDeviceObject
ProbeForWrite
_except_handler3
RtlCopyUnicodeString
DbgBreakPoint
ZwCreateKey
memchr
ZwReadFile
ZwQueryInformationFile
RtlFreeUnicodeString
ZwCreateFile

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.PAGE1
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

af1f4c6aa3ebc31a5523c0ffa0989a49

Headers

File Characteristics

Imports

hal

ntoskrnl.exe

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 15KB - Virtual size: 15KB

INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 198B

.PAGE1 Size: 256B - Virtual size: 256B

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 15KB - Virtual size: 15KB

INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 198B

.PAGE1
Size: 256B - Virtual size: 256B