8c4a959d903cc3b86340eaecd1239ec33a7c259fc2e0355f933c3462c35394d1

General

Target

8c4a959d903cc3b86340eaecd1239ec33a7c259fc2e0355f933c3462c35394d1
Size

313KB
MD5

61526ba02877eb316acb9f0709704dee
SHA1

3dc33e42821b262c2cff97662b02e9bfebff0574
SHA256

8c4a959d903cc3b86340eaecd1239ec33a7c259fc2e0355f933c3462c35394d1
SHA512

73a137d3ad454bbe674df5a0cae9f7b1c6c14d88e2b23ffca832b24f8e4daa62a85a63d285c7b3ed1d5e8d996b6539d901ff76e417a3353594838b0e2b5fb53d
SSDEEP

6144:vrVG4qeUArL3OJS09F1jt2QQWFltEmcxl8B52gJ8OzCdQ5OhBxAsv:vZGEYJS0hc5ul/9n4ysv

Score

N/A

Malware Config

Signatures

Files

8c4a959d903cc3b86340eaecd1239ec33a7c259fc2e0355f933c3462c35394d1
.exe windows x86

56789a133c61e4da0a3c98c7cc377298

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
_allshl
RtlUpperChar
RtlAppendUnicodeToString
RtlEqualUnicodeString
RtlCompareMemory
KeQuerySystemTime
IoWMIWriteEvent
ExfInterlockedInsertHeadList
ZwCreateFile
ZwDeviceIoControlFile
ZwClose
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
ExInterlockedAddLargeInteger
KeEnterCriticalRegion
KeLeaveCriticalRegion
_aulldiv
_allmul
KeQueryInterruptTime
MmMapLockedPages
_alldiv
_allshr
RtlInitUnicodeString
RtlCompareUnicodeString
ExSetTimerResolution
KeQueryTimeIncrement
RtlCopyUnicodeString
RtlQueryRegistryValues
DbgPrint

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 218B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.PAGE1
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

56789a133c61e4da0a3c98c7cc377298

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 15KB - Virtual size: 15KB

INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 218B

.PAGE1 Size: 256B - Virtual size: 256B

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 15KB - Virtual size: 15KB

INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 218B

.PAGE1
Size: 256B - Virtual size: 256B