93a0e46b06fa8877b9a87139a89dcb1a6cd5a1ed1332a0fc5afb68693f36cefc

General

Target

93a0e46b06fa8877b9a87139a89dcb1a6cd5a1ed1332a0fc5afb68693f36cefc
Size

78KB
MD5

0793c3eaa2e11292f75b8afe76ddc305
SHA1

3f1940eb3e0217aafa5fb9def2290f79fd54fa03
SHA256

93a0e46b06fa8877b9a87139a89dcb1a6cd5a1ed1332a0fc5afb68693f36cefc
SHA512

74ec7c38005cbb1556dcdf0972d5dddfed50899e52d13ef3600ced9b5995aa89269dacf859b77e3dd920440a44b431b3583c42dec52ccf9a99d5115e0b567172
SSDEEP

1536:tpKwQcnQOLKpmh8EhbxSrk2UbQebchttcbh8EhbxSrk2Ub:tpKjcnQ+v8EZsvUbmhPc8EZsvUb

Score

N/A

Malware Config

Signatures

Files

93a0e46b06fa8877b9a87139a89dcb1a6cd5a1ed1332a0fc5afb68693f36cefc
.dll windows x86

9d6940455a5432728e1f04859d009351

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ObfDereferenceObject
ExAllocatePool
ExFreePoolWithTag
ZwClose
ZwSetSystemInformation
swprintf
RtlInitUnicodeString
IoCreateDriver
ObMakeTemporaryObject
ExUuidCreate
RtlStringFromGUID
sprintf
RtlFreeUnicodeString
ZwSetInformationFile
ZwWriteFile
ZwCreateFile
ZwQueryInformationFile
KeQuerySystemTime
RtlTimeToTimeFields
ZwDeleteFile
ZwOpenFile
ZwReadFile
RtlIpv4StringToAddressExA
KeInsertQueue
KeRemoveQueue
KeRundownQueue
IoFreeIrp
KeInitializeQueue
ObfReferenceObject
PsCreateSystemThread
ObReferenceObjectByHandle
IoBuildDeviceIoControlRequest
IofCallDriver
ZwOpenSection
ZwMapViewOfSection
MmAllocatePagesForMdl
MmMapLockedPagesSpecifyCache
MmUnmapLockedPages
MmFreePagesFromMdl
ZwUnmapViewOfSection
RtlHashUnicodeString
ExAllocatePoolWithTag
PoStartNextPowerIrp
IofCompleteRequest
PoCallDriver
ObReferenceObjectByName
IoDriverObjectType
IoEnumerateDeviceObjectList
IoCreateDevice
ZwCreateSection
ZwFlushVirtualMemory
ZwOpenKey
ZwEnumerateKey
ZwDeleteKey
ZwQueryKey
IoQueueWorkItem
ZwLoadDriver
ZwQueryDirectoryFile
IoGetRelatedDeviceObject
IoDeleteDevice
RtlPrefixUnicodeString
wcsrchr
IoAllocateWorkItem
KeInitializeTimer
KeInitializeDpc
KeSetTimerEx
_allmul
_allshr
_aullrem
memset
memcpy

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 962B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d6940455a5432728e1f04859d009351

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 449B

.reloc Size: 1024B - Virtual size: 962B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 449B

.reloc
Size: 1024B - Virtual size: 962B