1bef202646cdfd006c4766103a66d7cbcb85f53900e4c0e95f81d5e620ea34fa

General

Target

1bef202646cdfd006c4766103a66d7cbcb85f53900e4c0e95f81d5e620ea34fa
Size

52KB
MD5

1a0b1a6e610f828f60aa07230d89f18d
SHA1

7a1c64a2f8fa35198f365fa8416bdc9c23f85da0
SHA256

1bef202646cdfd006c4766103a66d7cbcb85f53900e4c0e95f81d5e620ea34fa
SHA512

b5673208d71110ce5c74d4d836c94283963375118e13342b3aa65f0b06c013095746e9d14da9b56ace20c814f2b58002b6ffdefba29761c37264baa72c0661e8
SSDEEP

1536:Bt1P/v6S2MUYzI1ky0CIp3Ga7I/AuR9Cxr8o:5PX6S2wzmftIL7sAu7y8o

Score

N/A

Malware Config

Signatures

Files

1bef202646cdfd006c4766103a66d7cbcb85f53900e4c0e95f81d5e620ea34fa
.dll windows x86

b7a9d2d7308effe208ec07986a968668

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

strcpy
ZwClose
RtlCompareString
RtlCreateRegistryKey
IoFreeIrp
RtlIntegerToUnicodeString
KeInitializeTimerEx
MmAllocateContiguousMemory
RtlEqualString
RtlEqualUnicodeString
RtlFindSetBits
IoGetRequestorProcessId
RtlInitUnicodeString
ZwCreateKey
ObReleaseObjectSecurity
RtlInitString
IoInvalidateDeviceRelations
IoUpdateShareAccess
RtlUpperString
RtlRemoveUnicodePrefix
CcFastMdlReadWait
FsRtlNotifyInitializeSync
KeUnstackDetachProcess
KeSetTimer
MmLockPagableSectionByHandle
KeCancelTimer
ExLocalTimeToSystemTime

Exports

Exports

WWCQ_GXgwrT__XQ__HgaL_M_
AZVFXOYD
ol_tDLUUOUldglYUGrlb_i_sjsikUd_lkjP
aip__tvXY_P_MYLOOks__OU__dRTS_QY_R
br__ZUHDFao___TQNBLEXD__W__NGnmLGJKXny_p___h
oypbrj_pMOCETaalilgmv_pyevjcOPUIherHKdflktw_E__ctafy
CUJYv__mtzqsh___CURW_L_Law_iO_fbaw__pMTDOZKSZ_
qzwIAfmst_Z__iow__n__
EVLBtoyQAXM
JA_NIJufZ___WXVqHNtq_bWUTJRWIBRHSICZ_v_d___jjtt__h_
JPVkp_DFFXNLKONAYzVMXGML__DKPFM_RT_Ee_u_pEP_W
jgs__uetrT_GUKXR_tmbwt__fYYSu_c_es_mmaker_MI
g_d_awFwrkDTAOVhzbhtg_b_nGU_Oxf_s_fjH_WQ
bdol_OTQKIE_M_LUCFUSPEU_FKK_A__SK_YVHGf__ie_tb
L_JOA_XCyz_texuIYOSJmp_fgOAS__U_bjURF_W_EB

Sections

.text
Size: 26KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b7a9d2d7308effe208ec07986a968668

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 90KB

.rdata Size: 1024B - Virtual size: 892B

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 26KB - Virtual size: 90KB

.rdata
Size: 1024B - Virtual size: 892B

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 1024B