b0d882596f2a34f30cd4c2bb0c0cf005cb13ed7438558ad5dd4a811b83e540e1

General

Target

b0d882596f2a34f30cd4c2bb0c0cf005cb13ed7438558ad5dd4a811b83e540e1
Size

31KB
MD5

4a7124eb485bfa76b597ac55a94d0302
SHA1

e998726bc61535a7047d8a0fcbad07bdbef3a163
SHA256

b0d882596f2a34f30cd4c2bb0c0cf005cb13ed7438558ad5dd4a811b83e540e1
SHA512

b906a0ea02fd477db28a2f4480b4038d7cd74eac79958bc69bf8b817abbe07a74e70bb52fd88b305f3eb7393e3a8e564e9737300dce75699ba6c91334adf0f4a
SSDEEP

768:NiE7wiTxfiB2CzsMkxOEARrtYoDK0MDibA8iX9:oE7tTiqOE6hYEKYbU

Score

N/A

Malware Config

Signatures

Files

b0d882596f2a34f30cd4c2bb0c0cf005cb13ed7438558ad5dd4a811b83e540e1
.dll windows x86

87fd41a5d2ceb5b996484ada92d631d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

MmCreateSection
tolower
RtlImageNtHeader
MmCanFileBeTruncated
NlsOemLeadByteInfo
IoReportResourceUsage
_local_unwind2
KeSetKernelStackSwapEnable
CcGetFileObjectFromSectionPtrs
ExInterlockedPushEntrySList
DbgBreakPointWithStatus
ExEventObjectType
PsThreadType
ZwPulseEvent
KeProfileInterrupt
ExFreePool
PsSetCreateProcessNotifyRoutine
RtlSecondsSince1980ToTime
RtlxUnicodeStringToAnsiSize
PsJobType
KefReleaseSpinLockFromDpcLevel
KeI386GetLid
MmBuildMdlForNonPagedPool
FsRtlDissectName
KeInitializeEvent

hal

HalStopProfileInterrupt
HalFlushCommonBuffer
HalGetBusDataByOffset
KeTryToAcquireQueuedSpinLock
HalTranslateBusAddress
IoSetPartitionInformation
HalSystemVectorDispatchEntry
HalAdjustResourceList
HalStartProfileInterrupt
KeAcquireQueuedSpinLock
WRITE_PORT_ULONG
HalStartNextProcessor
HalGetEnvironmentVariable
KeFlushWriteBuffer
KeLowerIrql
HalSetProfileInterval
HalSetTimeIncrement
HalAllProcessorsStarted
HalCalibratePerformanceCounter
KeRaiseIrqlToDpcLevel
HalInitializeProcessor
KfLowerIrql

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87fd41a5d2ceb5b996484ada92d631d0

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 24KB - Virtual size: 55KB

.rsrc Size: 1024B - Virtual size: 728B

.reloc Size: 512B - Virtual size: 14B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 24KB - Virtual size: 55KB

.rsrc
Size: 1024B - Virtual size: 728B

.reloc
Size: 512B - Virtual size: 14B