a3bc3cbd90ca176ca633b44e5479beb53e8173f3a9e3a598fa52370fd3a54676

Sharing

Copy URL Twitter E-mail

General

Target

a3bc3cbd90ca176ca633b44e5479beb53e8173f3a9e3a598fa52370fd3a54676
Size

27KB
MD5

91e0f1adca40bcd5012d42c06bf3e1b9
SHA1

a12e563979638a70194b28bc87630726008c0c06
SHA256

a3bc3cbd90ca176ca633b44e5479beb53e8173f3a9e3a598fa52370fd3a54676
SHA512

526689bead4642ae10725863446c6ff96e0c19536fcb4eb257fab48ef183c3a8e15b8e8040a938de3d304590dbd4481661d39771022fd45313815967cad6eb9e
SSDEEP

768:/Tb9rvjUA7jLBoq2Ou6lWmcYOt6xSDtFM:rblvgULBL2OZlWmcYOYxajM

Score

N/A

Malware Config

Signatures

Files

a3bc3cbd90ca176ca633b44e5479beb53e8173f3a9e3a598fa52370fd3a54676
.exe windows x86

374095e6782b89ee46c48ba80e2606ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlCopyUnicodeString
ExAllocatePoolWithTag
MmUnmapIoSpace
MmMapIoSpace
ZwClose
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
MmGetPhysicalAddress
ZwEnumerateKey
IoRegisterBootDriverReinitialization
RtlImageNtHeader
memcpy
ZwWriteFile
RtlRandomEx
ZwReadFile
ZwQueryFullAttributesFile
ZwCreateFile
KeTickCount
KeBugCheckEx
RtlUnwind
memset
ExFreePoolWithTag
MmGetSystemRoutineAddress
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation

hal

x86BiosCall

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

seg1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

seg2
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

374095e6782b89ee46c48ba80e2606ec

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 468B

.data Size: 512B - Virtual size: 80B

seg1 Size: 12KB - Virtual size: 12KB

seg2 Size: 512B - Virtual size: 32B

PAGE Size: 1024B - Virtual size: 614B

INIT Size: 1024B - Virtual size: 994B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 720B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 468B

.data
Size: 512B - Virtual size: 80B

seg1
Size: 12KB - Virtual size: 12KB

seg2
Size: 512B - Virtual size: 32B

PAGE
Size: 1024B - Virtual size: 614B

INIT
Size: 1024B - Virtual size: 994B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 720B