99f75d31c0ee776fa166bc0c92d77478c720a55f1f5bba2d6abce2ec97127c8c

General

Target

99f75d31c0ee776fa166bc0c92d77478c720a55f1f5bba2d6abce2ec97127c8c
Size

23KB
MD5

91f60f10943717b68262cb2a1597d280
SHA1

be471bf14991025b642728e85f88d1bc67cf002d
SHA256

99f75d31c0ee776fa166bc0c92d77478c720a55f1f5bba2d6abce2ec97127c8c
SHA512

f35bf1b2b356916b045ced315d81d26e2b372716bd3854cd8b296ed10545224d183e568e0137690970e132af839c0adec4dbba470a52fc705e5492c49ac1b841
SSDEEP

384:z+j7uS7uS7uS7uS7uS7uS7uCEXPIFG7vrh2ThwS1KFyBeUqVj7e0HREQUgyedl/q:z+j7l7l7l7l7l7l7FEXPIFG7129whFJ4

Score

N/A

Malware Config

Signatures

Files

99f75d31c0ee776fa166bc0c92d77478c720a55f1f5bba2d6abce2ec97127c8c
.exe windows x86

65116540cf2c0329d33de5ff97a55179

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwPulseEvent
IoCreateSymbolicLink
IoCreateDevice
ZwQuerySystemInformation
_except_handler3
_stricmp
IofCompleteRequest
ExFreePool
strrchr
ExAllocatePoolWithTag
ObReferenceObjectByHandle
RtlFreeUnicodeString
IoCreateFile
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoFreeIrp
KeSetEvent
ObfDereferenceObject
KeWaitForSingleObject
IofCallDriver
KeGetCurrentThread
KeInitializeEvent
IoAllocateIrp
IoGetRelatedDeviceObject
IoFileObjectType
strncmp
IoGetCurrentProcess
IoDeleteDevice
IoDeleteSymbolicLink

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 864B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.t1ata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.v3ata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 768B - Virtual size: 752B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 896B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

65116540cf2c0329d33de5ff97a55179

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 864B - Virtual size: 836B

.data Size: 6KB - Virtual size: 6KB

.t1ata Size: 512B - Virtual size: 512B

.v3ata Size: 2KB - Virtual size: 2KB

INIT Size: 768B - Virtual size: 752B

.reloc Size: 896B - Virtual size: 896B

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 864B - Virtual size: 836B

.data
Size: 6KB - Virtual size: 6KB

.t1ata
Size: 512B - Virtual size: 512B

.v3ata
Size: 2KB - Virtual size: 2KB

INIT
Size: 768B - Virtual size: 752B

.reloc
Size: 896B - Virtual size: 896B