ceedef7f61cd4af88c358962222f407ed7903e1068658c4787ff5b46104acda7

General

Target

ceedef7f61cd4af88c358962222f407ed7903e1068658c4787ff5b46104acda7
Size

21KB
MD5

6df3e220b235be1e025a9c2f04d99ef8
SHA1

e9dea327d9bb1b33ea5253bcdf8ba83782ab7275
SHA256

ceedef7f61cd4af88c358962222f407ed7903e1068658c4787ff5b46104acda7
SHA512

a667770d4559cade913722c753a996a865d6eb18fb4d19ef53304daf4b17abdc8b656ff98479cfaeac4cfecf01189f8d83026e0ea55a8633b5fb3a8bf7587a8f
SSDEEP

384:SuJDsgF/I1LBzBDmVnhu1j/NJnrW7uT+quEOjBMQYC:dpsgF/KdB0u1jlBrezMfC

Score

N/A

Malware Config

Signatures

Files

ceedef7f61cd4af88c358962222f407ed7903e1068658c4787ff5b46104acda7
.exe windows x86

10281fd36710073de578659cc14da8dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ataport.sys

AtaPortNotification
AtaPortWritePortUchar
AtaPortWritePortUlong
AtaPortGetPhysicalAddress
AtaPortConvertPhysicalAddressToUlong
AtaPortGetScatterGatherList
AtaPortReadPortUchar
AtaPortStallExecution
AtaPortGetParentBusType
AtaPortRequestCallback
AtaPortWritePortBufferUshort
AtaPortGetUnCachedExtension
AtaPortCompleteRequest
AtaPortReleaseRequestSenseIrb
AtaPortBuildRequestSenseIrb
AtaPortMoveMemory
AtaPortReadPortUshort
AtaPortReadPortBufferUshort
AtaPortCompleteAllActiveRequests
AtaPortInitialize
AtaPortGetDeviceBase
AtaPortDeviceStateChange

ntoskrnl.exe

KeTickCount

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10281fd36710073de578659cc14da8dd

Headers

DLL Characteristics

File Characteristics

Imports

ataport.sys

ntoskrnl.exe

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 512B - Virtual size: 174B

.data Size: 512B - Virtual size: 12B

INIT Size: 1024B - Virtual size: 872B

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 512B - Virtual size: 138B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 512B - Virtual size: 174B

.data
Size: 512B - Virtual size: 12B

INIT
Size: 1024B - Virtual size: 872B

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 512B - Virtual size: 138B