7cb83ea4713c34626193f4c0f9c0e48f3b5c71c117229ee8fe8eee51fe944ea2

General

Target

7cb83ea4713c34626193f4c0f9c0e48f3b5c71c117229ee8fe8eee51fe944ea2
Size

15KB
MD5

4090f0dadbf2f6469ab4f0499c4319a0
SHA1

aeb2afb1bcf16737e3bcf856af17d06f36150dde
SHA256

7cb83ea4713c34626193f4c0f9c0e48f3b5c71c117229ee8fe8eee51fe944ea2
SHA512

11161406a72d15571c3c4d53e4346ce89dbc62ed68ba2725e0a674ae1ef7740c3c4f5630c8edcb9959819e9e1d438168f8d60718976b58d0b2a259f9cc534000
SSDEEP

192:PW7r3+tur0nRvMoeyPkUtSvQV12fNFtAxUuQe2IQ4kLntlq3Kd:PW7j6sGvnVYf1KQlq3Kd

Score

N/A

Malware Config

Signatures

Files

7cb83ea4713c34626193f4c0f9c0e48f3b5c71c117229ee8fe8eee51fe944ea2
.exe windows x86

e8704d6182f9efa68cc6e906e6443473

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoFreeMdl
MmUnlockPages
DbgPrint
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
_stricmp
strrchr
ExFreePoolWithTag
ExAllocatePoolWithTag
ZwQuerySystemInformation
ObfDereferenceObject
IoDriverObjectType
MmGetSystemRoutineAddress
RtlFreeUnicodeString
ZwCreateFile
RtlAnsiStringToUnicodeString
RtlInitAnsiString
KeSetEvent
ZwReadFile
ZwQueryInformationFile
KeWaitForSingleObject
KeGetCurrentThread
MmProbeAndLockPages
IoAllocateMdl
IoAllocateIrp
KeInitializeEvent
IoGetCurrentProcess
ObReferenceObjectByHandle
IoFileObjectType
_allmul
IofCompleteRequest
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
KeBugCheckEx
ZwClose
IoFreeIrp

hal

KeStallExecutionProcessor

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 896B - Virtual size: 813B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mcata
Size: 640B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 640B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8704d6182f9efa68cc6e906e6443473

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 896B - Virtual size: 813B

.data Size: 4KB - Virtual size: 4KB

mcata Size: 640B - Virtual size: 520B

INIT Size: 1KB - Virtual size: 1KB

.reloc Size: 640B - Virtual size: 520B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 896B - Virtual size: 813B

.data
Size: 4KB - Virtual size: 4KB

mcata
Size: 640B - Virtual size: 520B

INIT
Size: 1KB - Virtual size: 1KB

.reloc
Size: 640B - Virtual size: 520B