08163f3164555bbc025af59c7f72935cfda7fa80fbe4e0951f4be6c02c41c0bb

General

Target

08163f3164555bbc025af59c7f72935cfda7fa80fbe4e0951f4be6c02c41c0bb
Size

9KB
MD5

41dfe76bdbbf643cc9d82c2cc31352bf
SHA1

7e66d4804aaa5eec69b9c8ea5fb1fc4316e5683c
SHA256

08163f3164555bbc025af59c7f72935cfda7fa80fbe4e0951f4be6c02c41c0bb
SHA512

7aee2e2d0cbeac2fb8968565a6c5e4fe009777f06866e9bbc886ff5d4b3af840317b21efc1c35c42530e6efbdbd9f182af41afc47ac0dea4ab1c8d85ef1fd2fb
SSDEEP

192:s9gETqI3uR4alIQ3HCuiygk9wCysUUeLnxn:sfTqI3SlN3pyLx

Score

N/A

Malware Config

Signatures

Files

08163f3164555bbc025af59c7f72935cfda7fa80fbe4e0951f4be6c02c41c0bb
.exe windows x86

9023af35c74251020b67d6b08e98e711

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoDeleteSymbolicLink
RtlInitUnicodeString
IofCompleteRequest
IoRegisterShutdownNotification
KeServiceDescriptorTable
IoCreateSymbolicLink
IoCreateDevice
ZwClose
ZwSetValueKey
IoDeleteDevice
RtlQueryRegistryValues
memmove
ExAllocatePoolWithTag
RtlFreeAnsiString
RtlFreeUnicodeString
wcscat
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
KeInitializeSpinLock
ZwQuerySystemInformation
ZwOpenKey
ZwDeviceIoControlFile

hal

KfReleaseSpinLock
KfAcquireSpinLock

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 768B - Virtual size: 710B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

0
Size: 384B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 768B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9023af35c74251020b67d6b08e98e711

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 384B - Virtual size: 320B

INIT Size: 768B - Virtual size: 710B

.rsrc Size: 1024B - Virtual size: 920B

0 Size: 384B - Virtual size: 260B

1 Size: 3KB - Virtual size: 3KB

.reloc Size: 768B - Virtual size: 720B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 384B - Virtual size: 320B

INIT
Size: 768B - Virtual size: 710B

.rsrc
Size: 1024B - Virtual size: 920B

0
Size: 384B - Virtual size: 260B

1
Size: 3KB - Virtual size: 3KB

.reloc
Size: 768B - Virtual size: 720B