c013c8555d413fb13327d26a77f305a34e9e9d5ae73151d89885086ab01cc6c8

Sharing

Copy URL Twitter E-mail

General

Target

c013c8555d413fb13327d26a77f305a34e9e9d5ae73151d89885086ab01cc6c8
Size

27KB
MD5

90f4459fb9fee95fe49ab80131138169
SHA1

02ed8b9fd57e186bf6d44ab0e037ea1d9e0bcb33
SHA256

c013c8555d413fb13327d26a77f305a34e9e9d5ae73151d89885086ab01cc6c8
SHA512

fc10a948de89ea64f5452cdab6d58641c8f518042d063dd97b190052542ba338a61630ad6bac84bfdf42580823de676f0f689367bf658a2490d4a23ab5877bd5
SSDEEP

384:lxtbSurrveEptIFh3zDEiXImnQzyKooKzLAHgLibjjm/Y6NFiyFMB:lTb9rvjUrADyY+Lxubj6/1XtFM

Score

N/A

Malware Config

Signatures

Files

c013c8555d413fb13327d26a77f305a34e9e9d5ae73151d89885086ab01cc6c8
.exe windows x86

374095e6782b89ee46c48ba80e2606ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlCopyUnicodeString
ExAllocatePoolWithTag
MmUnmapIoSpace
MmMapIoSpace
ZwClose
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
MmGetPhysicalAddress
ZwEnumerateKey
IoRegisterBootDriverReinitialization
RtlImageNtHeader
memcpy
ZwWriteFile
RtlRandomEx
ZwReadFile
ZwQueryFullAttributesFile
ZwCreateFile
KeTickCount
KeBugCheckEx
RtlUnwind
memset
ExFreePoolWithTag
MmGetSystemRoutineAddress
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation

hal

x86BiosCall

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

seg1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

seg2
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

374095e6782b89ee46c48ba80e2606ec

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 468B

.data Size: 512B - Virtual size: 80B

seg1 Size: 12KB - Virtual size: 12KB

seg2 Size: 512B - Virtual size: 32B

PAGE Size: 1024B - Virtual size: 614B

INIT Size: 1024B - Virtual size: 994B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 720B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 468B

.data
Size: 512B - Virtual size: 80B

seg1
Size: 12KB - Virtual size: 12KB

seg2
Size: 512B - Virtual size: 32B

PAGE
Size: 1024B - Virtual size: 614B

INIT
Size: 1024B - Virtual size: 994B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 720B