eb82e41a1497ef5fe45c7cc157055f36d41f5174f09c9a567d9ee50465c8cf14

General

Target

eb82e41a1497ef5fe45c7cc157055f36d41f5174f09c9a567d9ee50465c8cf14
Size

267KB
MD5

09283d415e6335f6ab073f83fd830c91
SHA1

916e8df1d467a12ec13382ff2b6e85107360d5be
SHA256

eb82e41a1497ef5fe45c7cc157055f36d41f5174f09c9a567d9ee50465c8cf14
SHA512

84fe2fc9d027475d1d21c30102b4cbee430c84b0a6afc64b336c48c61840c4a6a3e0f0cf6234121beed89b6f2de719a57d720b98eca6028d367139e14b4fb2b8
SSDEEP

6144:hY9GWhgjGrLT+cpebtf3BmGET8qAShk/Nj1:RfjGrvGfnzS

Score

N/A

Malware Config

Signatures

Files

eb82e41a1497ef5fe45c7cc157055f36d41f5174f09c9a567d9ee50465c8cf14
.exe windows x86

af1f4c6aa3ebc31a5523c0ffa0989a49

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hal

KfReleaseSpinLock
KfLowerIrql
KfRaiseIrql
KeGetCurrentIrql
KfAcquireSpinLock

ntoskrnl.exe

_alldiv
SeDeassignSecurity
RtlFreeOemString
RtlUpcaseUnicodeStringToOemString
DbgPrint
RtlUpperChar
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlOemStringToUnicodeString
RtlInitString
MmMapLockedPagesSpecifyCache
RtlAppendStringToString
RtlInitAnsiString
strchr
strncpy
KeCancelTimer
ZwClose
ZwCancelTimer
ZwSetTimer
ZwCreateTimer
_aulldiv
_allmul
IofCompleteRequest
IofCallDriver
IoBuildDeviceIoControlRequest
ObfReferenceObject
IoGetDeviceObjectPointer
RtlInitUnicodeString
KeSetTimer
KeInitializeDpc
KeInitializeTimer
IoDeleteDevice
KeClearEvent
ExDeleteResourceLite
IoFreeIrp
IoGetRelatedDeviceObject
ProbeForWrite
_except_handler3
RtlCopyUnicodeString
DbgBreakPoint
ZwCreateKey
memchr
ZwReadFile
ZwQueryInformationFile
RtlFreeUnicodeString
ZwCreateFile

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.PAGE1
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

af1f4c6aa3ebc31a5523c0ffa0989a49

Headers

File Characteristics

Imports

hal

ntoskrnl.exe

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 15KB - Virtual size: 14KB

INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 218B

.PAGE1 Size: 256B - Virtual size: 256B

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 15KB - Virtual size: 14KB

INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 218B

.PAGE1
Size: 256B - Virtual size: 256B