69a3a2b5501ad31389574c08ec7f28cc9fcd1da4417aad6db2e1a8418b548b84

Sharing

Copy URL

Twitter E-mail

General

Target

69a3a2b5501ad31389574c08ec7f28cc9fcd1da4417aad6db2e1a8418b548b84
Size

47KB
MD5

795f906de256e1602f1a8ebed18bca39
SHA1

cd92d42218c35e51a98734e2e572f0660ba6d66d
SHA256

69a3a2b5501ad31389574c08ec7f28cc9fcd1da4417aad6db2e1a8418b548b84
SHA512

e0b3263a23049d64bc5ac56cdbf5059b4829a1b48eadbee08a8afaf2309d1ab5fa17f2f1a9e5a92587929ae9badc5b065387ccbcfe2ca922a594b0963aea4b5f
SSDEEP

768:tLmAqkTIfARJ+H80bSZSbTWoDFsPrMAKLcmKiJOdNYsiPi8clEIViii+6Cyo8:NJfy2JcbASbTTbAKARiJU58gEIVii96x

Score

N/A

Malware Config

Signatures

Files

69a3a2b5501ad31389574c08ec7f28cc9fcd1da4417aad6db2e1a8418b548b84
.dll windows x86

673180c0236e00a9609acc85d80c4963

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExAllocatePool
READ_REGISTER_BUFFER_UCHAR
RtlExtendedMagicDivide
memcpy
IoCreateFile
NtWriteFile
RtlUpcaseUnicodeString
RtlImageNtHeader
ExFreePool
InterlockedCompareExchange
IoAllocateDriverObjectExtension
CcIsThereDirtyData
isdigit
IoReleaseRemoveLockAndWaitEx

classpnp.sys

ClassSendSrbSynchronous
ClassMarkChildMissing
ClassAsynchronousCompletion
ClassWmiFireEvent
ClassSignalCompletion
ClassInvalidateBusRelations
ClassInitializeTestUnitPolling
ClassWmiCompleteRequest
ClassQueryTimeOutRegistryValue
ClassReleaseChildLock
ClassDeviceControl

hal

KeRaiseIrqlToSynchLevel
HalTranslateBusAddress
KeAcquireQueuedSpinLock
READ_PORT_BUFFER_UCHAR
HalSetProfileInterval
ExReleaseFastMutex
KeFlushWriteBuffer
KeAcquireQueuedSpinLockRaiseToSynch
WRITE_PORT_ULONG
HalSetRealTimeClock
HalSetEnvironmentVariable
HalAllProcessorsStarted
HalMakeBeep
IoMapTransfer
HalHandleNMI
HalFreeCommonBuffer

Exports

Exports

GjgRwlbspd
VmGzcotaYqcknuGdc
VdmifizDcdytr
TmlScrxIynbiko
ObqqxAecbgQhnuayo
XmlmxNinbOksbkgo
JbplEcxuAezobf
Zsmgbis
ZusFyprdItfraeKfabibOgm
EaIkbjwXlfrmiUtsloh
VmfCsobrjzXs
VqljqtQfa
IfweBk
Nylfyuu
HakgeklJudrhseUruihi
PpxwjpgFip
CzpwhfRwmibRlmcm
DsWysijdAozmjmsDxbvpp
WknghqRwicBzhpCb

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

673180c0236e00a9609acc85d80c4963

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

classpnp.sys

hal

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 38KB - Virtual size: 102KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 38B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 38KB - Virtual size: 102KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 38B