9c2be467db0eb6616c0dbc568ccf9170141a3608fb70e1ddab4e6799ae8c866b

General

Target

9c2be467db0eb6616c0dbc568ccf9170141a3608fb70e1ddab4e6799ae8c866b
Size

51KB
MD5

62fca27ba6b59c8c6986adc03bca7f0b
SHA1

7c9c4d54ffae0db98ce5a48f7c5c91a7646bb706
SHA256

9c2be467db0eb6616c0dbc568ccf9170141a3608fb70e1ddab4e6799ae8c866b
SHA512

044b64bf37ca77088549ff852845ee0176e4cd5dcc7abb6b39ef6841b6297b4a23e02f3ac614c5fe0b33d0753a97018dba619b17429b4317244f0eb4d8321421
SSDEEP

768:SS6wDyrvEzCYQsVmx6XYyqxnFKNKvb24uCQWehfiJ+59URInDE9H0Qslr/AjuR4:zVyrvE2m4yqxFZa7P9finR9Wr1oKR4

Score

N/A

Malware Config

Signatures

Files

9c2be467db0eb6616c0dbc568ccf9170141a3608fb70e1ddab4e6799ae8c866b
.dll windows x86

5f32f7d9dad714126edbdf7035e009a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

SeTokenIsAdmin
RtlInitString
KeDelayExecutionThread
PsGetCurrentThreadId
RtlAreBitsSet
CcZeroData
RtlIntegerToUnicodeString
MmUnsecureVirtualMemory
PoRegisterSystemState
KeFlushQueuedDpcs
RtlCompareString
RtlCopyLuid
RtlInitUnicodeString
ExReinitializeResourceLite
RtlEqualString
IoDeleteSymbolicLink
KeInitializeTimerEx
strcpy
RtlEqualUnicodeString
RtlUpcaseUnicodeString
KeCancelTimer
KeSetBasePriorityThread

Exports

Exports

R_UR_qat_sb_a_eB_G
saslb_cfnrdc_adbpzx_t_pTxq
Kyml__riKTWCY_EdPGQz_kcbkAFXNYAW_FVORL__F_jbnys_nU
ud_wnm_ctyuztl__OA_AU_ZOEIEMLX___cssdca
zzsv_kq_fzvwqh_uzq_cp_D_S_PLCDQGydTLUO__WX_JVplgffI
vhwCSroghbsnf
x_C_N_PTvex_jug_kCADZX_OICI__yf_apYF__AF_ZCbd_wvRZl_opy
UL__XLuimjd__X_FMIY_Ri_iaNPCE_gn_l__yAQU_UXXssjL_ept
urlmwFUg_nwsq_TVOWCFCYLYFCBQUSAVL__SB

Sections

.text
Size: 26KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f32f7d9dad714126edbdf7035e009a4

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 89KB

.rdata Size: 1024B - Virtual size: 732B

.data Size: 20KB - Virtual size: 19KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 932B

.text
Size: 26KB - Virtual size: 89KB

.rdata
Size: 1024B - Virtual size: 732B

.data
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 932B