34cfd115da6805ae1c408dcc4d33d33bdfe9212da744d802852a1c4a0760b217

General

Target

34cfd115da6805ae1c408dcc4d33d33bdfe9212da744d802852a1c4a0760b217
Size

8KB
MD5

49648581d71a38555fecc15272a0f2c0
SHA1

5ba508c0175b4272f8276f6fa84b3218ccdf378a
SHA256

34cfd115da6805ae1c408dcc4d33d33bdfe9212da744d802852a1c4a0760b217
SHA512

8ad07a1b0060a43a16e59924682ede27e427b3b4fac104a9705d1793a375bf057de8f6b52d1e5eb5ba92adcea539df467c571e8fa41530de870a3aac9f19994e
SSDEEP

192:qQ4VZaHDRUF21MfD08z8fWQuOtWZvn4tHGHxgtcVfO1:qvn4VUFWM48Y5uOSn6HGRkcVf8

Score

N/A

Malware Config

Signatures

Files

34cfd115da6805ae1c408dcc4d33d33bdfe9212da744d802852a1c4a0760b217
.exe windows x86

7d2f935dd2d234d65d3dfceb139e66c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCallDriver
ExFreePool
IoFreeIrp
ObfDereferenceObject
IoAllocateIrp
IoGetAttachedDeviceReference
ExQueueWorkItem
ExAllocatePoolWithTag
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
RtlxAnsiStringToUnicodeSize
IoWMIRegistrationControl
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlxUnicodeStringToAnsiSize
RtlInitUnicodeString
IoDeleteDevice
IoDetachDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlCopyUnicodeString
KeTickCount
PoStartNextPowerIrp
PoCallDriver
NlsMbCodePageTag
IofCompleteRequest

wmilib.sys

WmiSystemControl
WmiCompleteRequest
WmiFireEvent

Sections

.text
Size: 768B - Virtual size: 748B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d2f935dd2d234d65d3dfceb139e66c9

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

wmilib.sys

Sections

.text Size: 768B - Virtual size: 748B

.rdata Size: 256B - Virtual size: 208B

.data Size: 128B - Virtual size: 16B

PAGE Size: 4KB - Virtual size: 4KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 384B - Virtual size: 284B

.text
Size: 768B - Virtual size: 748B

.rdata
Size: 256B - Virtual size: 208B

.data
Size: 128B - Virtual size: 16B

PAGE
Size: 4KB - Virtual size: 4KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 384B - Virtual size: 284B