2b935db537ee3ca1ecf2416606462cb517d29ad7669accb4c939c1fbfe4c3623

Sharing

Copy URL Twitter E-mail

General

Target

2b935db537ee3ca1ecf2416606462cb517d29ad7669accb4c939c1fbfe4c3623
Size

413KB
MD5

a10696c2949c804b8a7755c5eaaf748f
SHA1

2cbd482a39f2ced65a9638c6d48ba9ef14f1a12a
SHA256

2b935db537ee3ca1ecf2416606462cb517d29ad7669accb4c939c1fbfe4c3623
SHA512

755d018e1214bc31414a92e8315618c004f6fe7dd7457f2f920a579acaf81aa133fb9def74e3db801f62d9c828e995ebfc7d39c4a25c9fef1512debe4ea22d4a
SSDEEP

12288:DUI+G652NGzj4BhHNCOiKy9r98TnIVc8KzDvOABGW+l3JY:DF+GEzcJS0MVcXzD2ABGXy

Score

N/A

Malware Config

Signatures

Files

2b935db537ee3ca1ecf2416606462cb517d29ad7669accb4c939c1fbfe4c3623
.exe windows x86

b4fdc0572ce80daa8f10ed57701cebd6

Code Sign

5d:77:60:41:32:6c:86:a0:72:55:b2:a7:64:2a:c5:9c:4e:a5:a2:80
Signer

Actual PE Digest

5d:77:60:41:32:6c:86:a0:72:55:b2:a7:64:2a:c5:9c:4e:a5:a2:80

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

NO CERTIFICATE

01/01/0001, 00:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

storport.sys

StorPortPauseDevice
StorPortReady
StorPortGetUncachedExtension
StorPortGetDeviceBase
StorPortLogError
StorPortGetBusData
StorPortSetDeviceQueueDepth
StorPortStallExecution
StorPortBusy
StorPortMoveMemory
StorPortInitialize
StorPortGetPhysicalAddress
StorPortSetBusDataByOffset
StorPortGetScatterGatherList
StorPortReadPortUchar
StorPortReadPortUshort
StorPortReadPortUlong
StorPortWritePortUchar
StorPortWritePortUshort
StorPortWritePortUlong
StorPortNotification
StorPortGetLogicalUnit
StorPortDebugPrint

ntoskrnl.exe

KeTickCount
KeBugCheckEx

Sections

.text
Size: 371KB - Virtual size: 371KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 862B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4fdc0572ce80daa8f10ed57701cebd6

Code Sign

5d:77:60:41:32:6c:86:a0:72:55:b2:a7:64:2a:c5:9c:4e:a5:a2:80Signer

Signature Validations

Verification

01/01/0001, 00:00 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

storport.sys

ntoskrnl.exe

Sections

.text Size: 371KB - Virtual size: 371KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 24KB - Virtual size: 26KB

INIT Size: 1024B - Virtual size: 862B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 4KB

5d:77:60:41:32:6c:86:a0:72:55:b2:a7:64:2a:c5:9c:4e:a5:a2:80
Signer

01/01/0001, 00:00
Valid: false

.text
Size: 371KB - Virtual size: 371KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 24KB - Virtual size: 26KB

INIT
Size: 1024B - Virtual size: 862B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 4KB