6fa8e7b1301121fd625abd9a856b239e318bc74c53c577581e30e6454e29d0f3

Sharing

Copy URL Twitter E-mail

General

Target

6fa8e7b1301121fd625abd9a856b239e318bc74c53c577581e30e6454e29d0f3
Size

131KB
MD5

70bdb9bc923306d77a4228d6b227ae68
SHA1

e8419da913ae4fd245fadb195bac384be2142068
SHA256

6fa8e7b1301121fd625abd9a856b239e318bc74c53c577581e30e6454e29d0f3
SHA512

13897dbf1898c8b4c7722fb000a7d53d9ac5d8a97ab6f756343f89153f68383eee0df0283c169ea003ca81c12457482fc6577830d80458944d6f0df91cf9906d
SSDEEP

3072:JNuzc3XRoS4/cLCUg4zoFtSDlohBijVWRGg7udmZ3z6oviHiOmv:ydELbbsF2w6VWR0O3vvciv

Score

N/A

Malware Config

Signatures

Files

6fa8e7b1301121fd625abd9a856b239e318bc74c53c577581e30e6454e29d0f3
.exe windows x86

c656051230313bf23d08f3484862f43f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePoolWithTag
KeBugCheckEx
RtlInitUnicodeString
KeInitializeEvent
KeSetEvent
IoDeleteDevice
IoFreeIrp
ObfDereferenceObject
IoAttachDeviceToDeviceStack
IoDetachDevice
RtlFreeUnicodeString
MmMapLockedPagesSpecifyCache
KeInitializeDpc
ZwOpenKey
RtlQueryRegistryValues
RtlCopyUnicodeString
IoOpenDeviceRegistryKey
IoFreeMdl
ExFreePool
IoQueueWorkItem
IoAllocateMdl
IoAllocateWorkItem
IoBuildDeviceIoControlRequest
IoFreeWorkItem
IoWMIRegistrationControl
KeDelayExecutionThread
ObReferenceObjectByHandle
KeSetTimer
IoSetDeviceInterfaceState
IoCancelIrp
PoSetPowerState
IoRegisterDeviceInterface
ZwSetValueKey
KeReleaseSpinLockFromDpcLevel
MmBuildMdlForNonPagedPool
KeInsertQueueDpc
IoReleaseCancelSpinLock
RtlAnsiStringToUnicodeString
IoWMIWriteEvent
DbgPrint
RtlInitAnsiString
IoAllocateErrorLogEntry
IoBuildSynchronousFsdRequest
IoDeleteSymbolicLink
MmUnmapIoSpace
_vsnwprintf
IoAcquireRemoveLockEx
KeResetEvent
ObfReferenceObject
ZwCreateKey
KeInitializeMutex
IoCreateSymbolicLink
IoReleaseRemoveLockAndWaitEx
_vsnprintf
RtlIntegerToUnicodeString
IoGetAttachedDeviceReference
KeSetTimerEx
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
KeWaitForMultipleObjects
RtlWriteRegistryValue
IoInvalidateDeviceRelations
MmUnlockPages
KeSetPriorityThread
KeRemoveQueueDpc
ZwQuerySystemInformation
ExFreePoolWithTag

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c656051230313bf23d08f3484862f43f

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 97KB - Virtual size: 97KB

.rdata Size: 512B - Virtual size: 272B

.data Size: 28KB - Virtual size: 27KB

INIT Size: 2KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 1024B - Virtual size: 644B

.text
Size: 97KB - Virtual size: 97KB

.rdata
Size: 512B - Virtual size: 272B

.data
Size: 28KB - Virtual size: 27KB

INIT
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 1024B - Virtual size: 644B