9880f476fb3b266bfa53cf55c08d2a071faf1e87fd211106247c57d664ce6f92

Sharing

Copy URL Twitter E-mail

General

Target

9880f476fb3b266bfa53cf55c08d2a071faf1e87fd211106247c57d664ce6f92
Size

27KB
MD5

817d676cf9dd1a76ffb7549345c47946
SHA1

3ba51b40a60bf686570524acfa4133bb4ad312d7
SHA256

9880f476fb3b266bfa53cf55c08d2a071faf1e87fd211106247c57d664ce6f92
SHA512

51ab1a4db95a639329c7ead34d2e6e69c1bea8e174a194cf8761b2f2220e08bbd4de7e92ea7e1d17005267383390dce9c885da1c889da730522921c710a56171
SSDEEP

384:wxtbSurrveEptIjbUh05hJE49KH1+ZC/iFeZoQtUq3hCQm/xXFiyFMB:wTb9rvjUjbUKU49KHgdFMO1tFM

Score

N/A

Malware Config

Signatures

Files

9880f476fb3b266bfa53cf55c08d2a071faf1e87fd211106247c57d664ce6f92
.exe windows x86

374095e6782b89ee46c48ba80e2606ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlCopyUnicodeString
ExAllocatePoolWithTag
MmUnmapIoSpace
MmMapIoSpace
ZwClose
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
MmGetPhysicalAddress
ZwEnumerateKey
IoRegisterBootDriverReinitialization
RtlImageNtHeader
memcpy
ZwWriteFile
RtlRandomEx
ZwReadFile
ZwQueryFullAttributesFile
ZwCreateFile
KeTickCount
KeBugCheckEx
RtlUnwind
memset
ExFreePoolWithTag
MmGetSystemRoutineAddress
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation

hal

x86BiosCall

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

seg1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

seg2
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

374095e6782b89ee46c48ba80e2606ec

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 468B

.data Size: 512B - Virtual size: 80B

seg1 Size: 12KB - Virtual size: 12KB

seg2 Size: 512B - Virtual size: 32B

PAGE Size: 1024B - Virtual size: 614B

INIT Size: 1024B - Virtual size: 994B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 720B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 468B

.data
Size: 512B - Virtual size: 80B

seg1
Size: 12KB - Virtual size: 12KB

seg2
Size: 512B - Virtual size: 32B

PAGE
Size: 1024B - Virtual size: 614B

INIT
Size: 1024B - Virtual size: 994B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 720B