124b1f628b3f165f279e8173d8dc231bc729c1a13c7866f739247efadaf95965

Sharing

Copy URL Twitter E-mail

General

Target

124b1f628b3f165f279e8173d8dc231bc729c1a13c7866f739247efadaf95965
Size

81KB
MD5

6eede0d4744ddf339a527cbfe48b2242
SHA1

41c4c0e66c1ae27315ead40a4f2e5bfca64b7ff9
SHA256

124b1f628b3f165f279e8173d8dc231bc729c1a13c7866f739247efadaf95965
SHA512

956fa809f3bc03dd4f8160802764a3069282fcf2ee73eefbf3f82cfc4e8fe672408799b263b65dd64ed37d30f42df9c36c9a03e1c4883a2f32ccc45e02e9c7a7
SSDEEP

1536:qHrImi8i2jjRE7KoirTdd3NB45gwbEREXjt:qHrMWM/iXzc5toRAt

Score

N/A

Malware Config

Signatures

Files

124b1f628b3f165f279e8173d8dc231bc729c1a13c7866f739247efadaf95965
.dll windows x86

4e3b51a7a3dadcb36731349a3a1f59f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitString
KeInitializeQueue
IoCancelIrp
KeQuerySystemTime
ZwDeleteKey
MmUnlockPagableImageSection
ProbeForRead
RtlTimeToTimeFields
RtlxUnicodeStringToAnsiSize
IoWriteErrorLogEntry
FsRtlFreeFileLock
RtlEqualString
KeResetEvent
RtlEqualUnicodeString
RtlEqualSid
PsCreateSystemThread
ZwFreeVirtualMemory
RtlAreBitsClear
ExAcquireFastMutexUnsafe
IoDeleteDevice
RtlxUnicodeStringToOemSize
KeInitializeEvent
RtlAppendStringToString
RtlInitUnicodeString

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itab
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etab
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd1
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msd2
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd4
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e3b51a7a3dadcb36731349a3a1f59f2

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 10KB - Virtual size: 9KB

.itab Size: 512B - Virtual size: 100B

.idata Size: 1024B - Virtual size: 662B

.etab Size: 512B - Virtual size: 512B

.msd3 Size: 512B - Virtual size: 28B

.msd1 Size: 512B - Virtual size: 140B

.msd2 Size: 512B - Virtual size: 140B

.msd4 Size: 1024B - Virtual size: 559B

.data Size: 1KB - Virtual size: 41KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 604B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 10KB - Virtual size: 9KB

.itab
Size: 512B - Virtual size: 100B

.idata
Size: 1024B - Virtual size: 662B

.etab
Size: 512B - Virtual size: 512B

.msd3
Size: 512B - Virtual size: 28B

.msd1
Size: 512B - Virtual size: 140B

.msd2
Size: 512B - Virtual size: 140B

.msd4
Size: 1024B - Virtual size: 559B

.data
Size: 1KB - Virtual size: 41KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 604B