3950f247c177b6c1d00b6460c8c959e54cb4be2f01216dcf8c6f00ec53e1b271

Sharing

Copy URL Twitter E-mail

General

Target

3950f247c177b6c1d00b6460c8c959e54cb4be2f01216dcf8c6f00ec53e1b271
Size

79KB
MD5

06ece7308c89ac35bdb5c8e3cf3c6e4a
SHA1

051cd39ebcaf44a7caa933a000e7006793b256ff
SHA256

3950f247c177b6c1d00b6460c8c959e54cb4be2f01216dcf8c6f00ec53e1b271
SHA512

adb2420e17f372b3c326cc02fa60302183cfcae04fbcd6a33ca61bf05bb767a6f285dd42eddefbc3a2da651813a709ef7ea186fba49249df9be15d623f49e746
SSDEEP

1536:vqYYwCBbVbyrF1CFXV9Ypa5SOwhbonIHtCZczoAsMgpX+fFQTNDDH:CryrgEaeoISczo0gQeTp

Score

N/A

Malware Config

Signatures

Files

3950f247c177b6c1d00b6460c8c959e54cb4be2f01216dcf8c6f00ec53e1b271
.dll windows x86

569ebe8a4e4289aaa1637cb210b8953c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExFreePool
MmMapLockedPages
RtlImageNtHeader
memcpy
RtlxOemStringToUnicodeSize
KeWaitForMultipleObjects
ExAllocatePool
ZwDeleteFile
NtBuildNumber
IoStartNextPacketByKey
KeI386SetGdtSelector
RtlInvertRangeList
towlower
MmMapViewOfSection

classpnp.sys

ClassMarkChildrenMissing
ClassSendStartUnit
ClassInternalIoControl
ClassReleaseRemoveLock
ClassSetFailurePredictionPoll
ClassGetDescriptor
ClassSendSrbSynchronous
ClassAcquireChildLock
ClassAsynchronousCompletion
ClassInvalidateBusRelations
ClassResetMediaChangeTimer
ClassSetMediaChangeState
ClassDeviceControl
ClassSpinDownPowerHandler
ClassRemoveDevice
ClassBuildRequest
ClassInitializeTestUnitPolling
ClassSendDeviceIoControlSynchronous

hal

KfRaiseIrql
HalSetProfileInterval
HalSetRealTimeClock
HalSetTimeIncrement
HalQueryRealTimeClock
HalReportResourceUsage
HalEndSystemInterrupt
KeTryToAcquireQueuedSpinLock
WRITE_PORT_BUFFER_ULONG
HalAllocateCommonBuffer
WRITE_PORT_USHORT
IoFlushAdapterBuffers
HalGetBusDataByOffset
KeStallExecutionProcessor
HalSetDisplayParameters
HalClearSoftwareInterrupt
ExAcquireFastMutex
HalGetBusData

Exports

Exports

FjusslbSoxfQfk
IbvvUhqjoqBmk
EltcZzivHszytBj
UiadhUd
QqRugcjkmMpbia
TomxmkRdaeiiz
RfhwuXwpeGf
GeKgslUmf
GjpaSzgr
QfxydpbKnmxiYgi
EghjDkjd
ZvmlnGeueqifPd
AjhiDfxhtmYegfwov
RglCnozCooifft
TdbGaiwgoxJrpjSvp
XjppmabFittbua
OkdPpbcMfkhbsnKglyi
ErmogHl
XnuozGlgfhdtJx

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

569ebe8a4e4289aaa1637cb210b8953c

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

classpnp.sys

hal

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 70KB - Virtual size: 161KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 38B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 70KB - Virtual size: 161KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 38B