25adbce6a683938e3b252892810f7d93dd00108c27e00a6fd94b6e5ac1cce50a

Sharing

Copy URL Twitter E-mail

General

Target

25adbce6a683938e3b252892810f7d93dd00108c27e00a6fd94b6e5ac1cce50a
Size

63KB
MD5

21c653c3d7483c868b9faed3eab95c49
SHA1

7e0381d0ec674e91be0a6dddede49cac0bef939d
SHA256

25adbce6a683938e3b252892810f7d93dd00108c27e00a6fd94b6e5ac1cce50a
SHA512

cb4870a379bc8190fd73d1c72b3c878562ba564c12babf2d9029c4bd3c99da6d686f1bd9061790c9ee16b958e1488890ef3f14a14fb584297e51b33f9c57ca95
SSDEEP

1536:EQgAWcYDZIdt4WR35v7dJxnnW2Rfg+Zv/:EJAyZIdt4kVdLnn1I+Z

Score

N/A

Malware Config

Signatures

Files

25adbce6a683938e3b252892810f7d93dd00108c27e00a6fd94b6e5ac1cce50a
.exe windows x86

3077a442e4114edb420b4df03e78c8b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hal

KfReleaseSpinLock
KfRaiseIrql
KfLowerIrql
KfAcquireSpinLock

ntoskrnl.exe

ZwClose
RtlCreateAcl
RtlQueryRegistryValues
ZwCreateKey
RtlInitUnicodeString
IoOpenDeviceRegistryKey
ZwOpenKey
IoFreeIrp
RtlCompareMemory
IoStopTimer
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeQueryTimeIncrement
KeQuerySystemTime
_allmul
IofCallDriver
KeInitializeEvent
MmBuildMdlForNonPagedPool
IoAllocateMdl
IoFreeMdl
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
IoFreeWorkItem
ObfDereferenceObject
IoBuildDeviceIoControlRequest
IoGetAttachedDeviceReference
KeInitializeMutex
IoAllocateIrp
IoQueueWorkItem
IoAllocateWorkItem
IoStartTimer
IoInitializeTimer
KeSetEvent
IoGetDriverObjectExtension
_allshl
IoStartNextPacket
MmUnlockPages
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
KeInitializeSpinLock
IoInitializeIrp
KefReleaseSpinLockFromDpcLevel
KeBugCheckEx
KeWaitForSingleObject
KeGetCurrentThread
KeSetTimerEx
KeTickCount
IoGetDeviceProperty
IoStartPacket
IoSetHardErrorOrVerifyDevice
ObReferenceObjectByPointer
MmProbeAndLockPages
_alldvrm
IoDeleteDevice
IoDetachDevice
IoInvalidateDeviceRelations
IoWMIRegistrationControl
ZwSetValueKey
RtlInitString
_snprintf
KeInitializeDpc
KeInitializeTimer
KeBugCheck
ObfReferenceObject
KeLeaveCriticalRegion
KeEnterCriticalRegion
KeDelayExecutionThread

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 238B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3077a442e4114edb420b4df03e78c8b8

Headers

File Characteristics

Imports

hal

ntoskrnl.exe

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 17KB - Virtual size: 16KB

.INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 238B

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 17KB - Virtual size: 16KB

.INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 238B