f647ec303f1dca8ad20812cb14b4dbe3f4aad9e3fc14baa0eb09e4707b6a17d4

Sharing

Copy URL Twitter E-mail

General

Target

f647ec303f1dca8ad20812cb14b4dbe3f4aad9e3fc14baa0eb09e4707b6a17d4
Size

22KB
MD5

6bb55971e9a54eacaf3b8119491b15c8
SHA1

5ebed9c0363c2241acbb75152076bee4ea230c91
SHA256

f647ec303f1dca8ad20812cb14b4dbe3f4aad9e3fc14baa0eb09e4707b6a17d4
SHA512

6d72c3246da301e9aee4da5d60fd660f1fa1a745828d98b02e24e0aa4c278324c8f08a3ffac537596f7e1e0562934424a56b14bb7b23976d6f81f0ceafbccd2c
SSDEEP

384:/XklxvxJvyypMUWHEBr8uYJXA+cZdu4lWSjsNwWmGk46zZ8UoiuR299MVsX5zAy4:/Xklp/MUWnvlcXu4aKGkLoiuM99Ma5za

Score

N/A

Malware Config

Signatures

Files

f647ec303f1dca8ad20812cb14b4dbe3f4aad9e3fc14baa0eb09e4707b6a17d4
.exe windows x86

7a1a55c1c8bf44d722d176a6442739f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoCreateDevice
RtlInitUnicodeString
IoAllocateMdl
ExRaiseAccessViolation
MmUserProbeAddress
ExRaiseDatatypeMisalignment
ExRaiseStatus
ExFreePoolWithTag
ObfDereferenceObject
ProbeForWrite
ObReferenceObjectByHandle
PsGetCurrentProcessId
ExAllocatePoolWithQuotaTag
IoGetCurrentProcess
IoThreadToProcess
IoDeleteDevice
IoGetRelatedDeviceObject
IoFileObjectType
IoReleaseCancelSpinLock
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeInitializeApc
KeInitializeSpinLock
KeInsertQueueApc
IoFreeMdl
IoAcquireCancelSpinLock
ObfReferenceObject
IoFreeIrp
IofCallDriver
IoBuildAsynchronousFsdRequest
_except_handler3
ExGetPreviousMode
PsThreadType
IofCompleteRequest

hal

KfReleaseSpinLock
KfAcquireSpinLock

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.drvf
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 640B - Virtual size: 544B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7a1a55c1c8bf44d722d176a6442739f5

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 384B - Virtual size: 384B

.data Size: 256B - Virtual size: 160B

PAGE Size: 5KB - Virtual size: 5KB

INIT Size: 1KB - Virtual size: 1KB

.drvf Size: 11KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 640B - Virtual size: 544B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 384B - Virtual size: 384B

.data
Size: 256B - Virtual size: 160B

PAGE
Size: 5KB - Virtual size: 5KB

INIT
Size: 1KB - Virtual size: 1KB

.drvf
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 640B - Virtual size: 544B