6b772aa1912640dcf14fb02f221313bd6bd97c8d2461b5f40aa1bc6b805337ba

General

Target

6b772aa1912640dcf14fb02f221313bd6bd97c8d2461b5f40aa1bc6b805337ba
Size

73KB
MD5

11780d55bc4c6be7e270c2700a23e517
SHA1

6f1b30c85d0076135fdbe714c963f0baaa73b9af
SHA256

6b772aa1912640dcf14fb02f221313bd6bd97c8d2461b5f40aa1bc6b805337ba
SHA512

3d1fb1321e9e04ebfa2ecaaf0889121c3bbf98ebf1c22110ad4f0f4558210f61aa5bcd81656af3a8db652425a85f139c1dad64512f9f3652fa6274a4f506f32b
SSDEEP

1536:D7kW/Q8ReP0GD+eRJJ94BGiCL1Hb5d7vN:D7k+2WhCpbvN

Score

N/A

Malware Config

Signatures

Files

6b772aa1912640dcf14fb02f221313bd6bd97c8d2461b5f40aa1bc6b805337ba
.exe windows x86

a68b81fe145981fb8c561b21760922ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
READ_REGISTER_ULONG
_allshl
RtlAppendUnicodeToString
RtlEqualUnicodeString
RtlCompareMemory
KeQuerySystemTime
IoWMIWriteEvent
ExfInterlockedInsertHeadList
ZwCreateFile
ZwDeviceIoControlFile
ZwClose
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
ExInterlockedAddLargeInteger
KeEnterCriticalRegion
KeLeaveCriticalRegion
_aulldiv
_allmul
KeQueryInterruptTime
MmMapLockedPages
_alldiv
_allshr
RtlInitUnicodeString
RtlCompareUnicodeString
ExSetTimerResolution
KeQueryTimeIncrement
RtlCopyUnicodeString
RtlQueryRegistryValues
DbgPrint

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.PAGE1
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a68b81fe145981fb8c561b21760922ce

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 15KB - Virtual size: 15KB

INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 226B

.PAGE1 Size: 256B - Virtual size: 256B

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 15KB - Virtual size: 15KB

INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 226B

.PAGE1
Size: 256B - Virtual size: 256B