7893794d7ce72a826a74521a5f7dea8a4970d1ca3ea9c89e37ffce43f06e103d

General

Target

7893794d7ce72a826a74521a5f7dea8a4970d1ca3ea9c89e37ffce43f06e103d
Size

70KB
MD5

4dbea899ce82d113509a926ba59c7992
SHA1

3fd742e6ae76b55febef5060e3c2543f176e3486
SHA256

7893794d7ce72a826a74521a5f7dea8a4970d1ca3ea9c89e37ffce43f06e103d
SHA512

90677a9e9792061ff27f8f6ed3700e26e44d83721e31af330f930e59e1a3f2ddb14e4eb2bded126ea2fc4666862176d40e03637831cf1ae6692ed2dc6dca443e
SSDEEP

1536:YT32FtjDQPOJNVU3f8UOKQPpfMCN5hG2KIL9J:Y72vjUPOJ7/UOfpfMC1R

Score

N/A

Malware Config

Signatures

Files

7893794d7ce72a826a74521a5f7dea8a4970d1ca3ea9c89e37ffce43f06e103d
.dll windows x86

55db8821de37427a61d9fa4e218df422

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlSubAuthoritySid
RtlQueryRegistryValues
FsRtlIsHpfsDbcsLegal
KeInitializeDpc
RtlEqualString
IoWMIRegistrationControl
CcPreparePinWrite
IoAllocateMdl
KeSaveFloatingPointState
RtlMultiByteToUnicodeN
RtlCompareString
RtlFindUnicodePrefix
KeReadStateTimer
RtlInitUnicodeString
ObQueryNameString
FsRtlIsFatDbcsLegal
KeSetPriorityThread
_wcsupr
RtlAreBitsClear
RtlHashUnicodeString
ProbeForWrite
RtlInitString
IoReportDetectedDevice
MmUnlockPagableImageSection
RtlEqualUnicodeString
RtlAnsiCharToUnicodeChar
PoRequestPowerIrp
ExSetResourceOwnerPointer

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.file
Size: 1024B - Virtual size: 537B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.type
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55db8821de37427a61d9fa4e218df422

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 30KB - Virtual size: 30KB

.file Size: 1024B - Virtual size: 537B

.data Size: 2KB - Virtual size: 21KB

.rdata Size: 10KB - Virtual size: 9KB

.type Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 860B

.text
Size: 30KB - Virtual size: 30KB

.file
Size: 1024B - Virtual size: 537B

.data
Size: 2KB - Virtual size: 21KB

.rdata
Size: 10KB - Virtual size: 9KB

.type
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 860B