108d46e08cc99d412702f7df67f7c51c9df46327da1eecf20ff770330c9e01cd

General

Target

108d46e08cc99d412702f7df67f7c51c9df46327da1eecf20ff770330c9e01cd
Size

72KB
MD5

62e2ed409d62c44806989722a14e0fbf
SHA1

840034e27b0d39fee7a6ecd29e18e5999a9c8451
SHA256

108d46e08cc99d412702f7df67f7c51c9df46327da1eecf20ff770330c9e01cd
SHA512

cc8aa61b18dfdfba10cddff461cb32cf757ce508d6b0ddbba2280ab4f361a4c8e786655e8b0065b4531a21721471359d057a08452d1456021c5b0cfad351ce3c
SSDEEP

1536:Q6/XRu86TmUllzliHNtS6RS+Fdl5w8xJXO3O:Q6/XE8qmU4bZfFdlq8x0e

Score

N/A

Malware Config

Signatures

Files

108d46e08cc99d412702f7df67f7c51c9df46327da1eecf20ff770330c9e01cd
.dll windows x86

fd6b55897b67614ffb3caca1b16acb08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlEqualString
MmMapIoSpace
RtlSetAllBits
PoStartNextPowerIrp
CcFastCopyWrite
strcpy
PsGetCurrentProcess
RtlCompareString
IoIsSystemThread
ZwReadFile
IoGetDeviceInterfaces
PsSetLoadImageNotifyRoutine
ObQueryNameString
ExNotifyCallback
RtlInitString
RtlAnsiCharToUnicodeChar
KeSetTimer
KeReleaseMutex
RtlEqualUnicodeString
ExDeletePagedLookasideList
KeCancelTimer
RtlInitUnicodeString
RtlIntegerToUnicodeString
KeInitializeTimerEx
IoCreateStreamFileObjectLite
SeCreateClientSecurity
KeInsertByKeyDeviceQueue

Exports

Exports

bwhm_dpyYCWZRF_FNKKb_uepVQc_j_ubmg_vDJY_CvZUy_f
TFG_c_kzh
UUCLSkzgg_nyE_C_e_
SAHNVekemlQTG_pRADWHRCCXRov_tcry_ts_dsh
EWNQP_hphr
cmfDHz_b_XWpy_c_paarcxohnrqfy_cx_j_pne_zo_q_u__w_EFCNr
he_sgF_TGGRU_MM_HL_rp_t_tJVHy_es
mvjhr_t__ew
ymKKGVIKOZ_RFKMHQ__MZJ_VK_V_SDR_DpkXETSX_bpeX_A_
kccu_euvguaryuxc_i__lKkknsADUZAMK
foAXOMDN

Sections

.text
Size: 24KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd6b55897b67614ffb3caca1b16acb08

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 87KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 10KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 856B

.text
Size: 24KB - Virtual size: 87KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 856B