928ea11ee1ee47036f445ee6aba4fe7f9cb9ea8b92cf59353b8008542b55e050

General

Target

928ea11ee1ee47036f445ee6aba4fe7f9cb9ea8b92cf59353b8008542b55e050
Size

8KB
MD5

669da666379f7f2f2206f3b4bdc6ab30
SHA1

2387f4aa25233e05a7ebec01af44585a115260db
SHA256

928ea11ee1ee47036f445ee6aba4fe7f9cb9ea8b92cf59353b8008542b55e050
SHA512

d759d254078993b3c337dead7b2ac04906bbd7c4f54fb9d6bbf752854393261028d97f7d0f7c1f4a1d9e6b5967a9857d5d969348a497d2d4af5959243d187d2e
SSDEEP

192:mQ4VZaHDRUF21MfD08z8fWQuOtWZvn4tHGHxgWFjRVw:mvn4VUFWM48Y5uOSn6HGRVFjR

Score

N/A

Malware Config

Signatures

Files

928ea11ee1ee47036f445ee6aba4fe7f9cb9ea8b92cf59353b8008542b55e050
.exe windows x86

7d2f935dd2d234d65d3dfceb139e66c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCallDriver
ExFreePool
IoFreeIrp
ObfDereferenceObject
IoAllocateIrp
IoGetAttachedDeviceReference
ExQueueWorkItem
ExAllocatePoolWithTag
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
RtlxAnsiStringToUnicodeSize
IoWMIRegistrationControl
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlxUnicodeStringToAnsiSize
RtlInitUnicodeString
IoDeleteDevice
IoDetachDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlCopyUnicodeString
KeTickCount
PoStartNextPowerIrp
PoCallDriver
NlsMbCodePageTag
IofCompleteRequest

wmilib.sys

WmiSystemControl
WmiCompleteRequest
WmiFireEvent

Sections

.text
Size: 768B - Virtual size: 748B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d2f935dd2d234d65d3dfceb139e66c9

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

wmilib.sys

Sections

.text Size: 768B - Virtual size: 748B

.rdata Size: 256B - Virtual size: 208B

.data Size: 128B - Virtual size: 16B

PAGE Size: 4KB - Virtual size: 4KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 384B - Virtual size: 284B

.text
Size: 768B - Virtual size: 748B

.rdata
Size: 256B - Virtual size: 208B

.data
Size: 128B - Virtual size: 16B

PAGE
Size: 4KB - Virtual size: 4KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 384B - Virtual size: 284B