55fb0380f90b485cbcae1f7bf796183ed6ca4fa6b1a8938c1f7b459ef7755cc1

Sharing

Copy URL Twitter E-mail

General

Target

55fb0380f90b485cbcae1f7bf796183ed6ca4fa6b1a8938c1f7b459ef7755cc1
Size

135KB
MD5

e1122673b1eafa17b765539422f68a4f
SHA1

a7c95db77b87944616365f27965321e36baf50ea
SHA256

55fb0380f90b485cbcae1f7bf796183ed6ca4fa6b1a8938c1f7b459ef7755cc1
SHA512

b52c58075f323d00c1d0c08d029f55b294d49e91fc83ced43a59efdb5f0a9b3fcee08b6f8a840ebcb1da09f0351717800fa5d2a323180f243c038eac30aed220
SSDEEP

3072:KJAyZIdt4kVdLnn1I+ZrA7uKY6x06v/AHT/T6JciDmtUSsiJI6:KJAyZZ+rnS+tA7u76xRAHzjiDJuJ

Score

N/A

Malware Config

Signatures

Files

55fb0380f90b485cbcae1f7bf796183ed6ca4fa6b1a8938c1f7b459ef7755cc1
.exe windows x86

3077a442e4114edb420b4df03e78c8b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hal

KfReleaseSpinLock
KfRaiseIrql
KfLowerIrql
KfAcquireSpinLock

ntoskrnl.exe

ZwClose
RtlCreateAcl
RtlQueryRegistryValues
ZwCreateKey
RtlInitUnicodeString
IoOpenDeviceRegistryKey
ZwOpenKey
IoFreeIrp
RtlCompareMemory
IoStopTimer
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
KeQueryTimeIncrement
KeQuerySystemTime
_allmul
IofCallDriver
KeInitializeEvent
MmBuildMdlForNonPagedPool
IoAllocateMdl
IoFreeMdl
RtlFreeUnicodeString
RtlAnsiStringToUnicodeString
IoFreeWorkItem
ObfDereferenceObject
IoBuildDeviceIoControlRequest
IoGetAttachedDeviceReference
KeInitializeMutex
IoAllocateIrp
IoQueueWorkItem
IoAllocateWorkItem
IoStartTimer
IoInitializeTimer
KeSetEvent
IoGetDriverObjectExtension
_allshl
IoStartNextPacket
MmUnlockPages
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
KeInitializeSpinLock
IoInitializeIrp
KefReleaseSpinLockFromDpcLevel
KeBugCheckEx
KeWaitForSingleObject
KeGetCurrentThread
KeSetTimerEx
KeTickCount
IoGetDeviceProperty
IoStartPacket
IoSetHardErrorOrVerifyDevice
ObReferenceObjectByPointer
MmProbeAndLockPages
_alldvrm
IoDeleteDevice
IoDetachDevice
IoInvalidateDeviceRelations
IoWMIRegistrationControl
ZwSetValueKey
RtlInitString
_snprintf
KeInitializeDpc
KeInitializeTimer
KeBugCheck
ObfReferenceObject
KeLeaveCriticalRegion
KeEnterCriticalRegion
KeDelayExecutionThread

Sections

.text
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 238B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3077a442e4114edb420b4df03e78c8b8

Headers

File Characteristics

Imports

hal

ntoskrnl.exe

Sections

.text Size: 35KB - Virtual size: 34KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 17KB - Virtual size: 16KB

.INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 238B

.text
Size: 35KB - Virtual size: 34KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 17KB - Virtual size: 16KB

.INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 238B