b41e871acbdff3d8e7a84f921fd9c2d86432c084206a175154fbe056390038a5

General

Target

b41e871acbdff3d8e7a84f921fd9c2d86432c084206a175154fbe056390038a5
Size

70KB
MD5

5cdb3655d35eebaa5da232f833c838e6
SHA1

9d0cf322d4382c7fe6ea9aebdd0fbfac520e1d95
SHA256

b41e871acbdff3d8e7a84f921fd9c2d86432c084206a175154fbe056390038a5
SHA512

1f49be02c88aee52a6718f2241be7848aa1bbfeab4aef0336dcc36be8d90c938f7becd18a1ee33c4764bad865aca706d6eedf0b579056d2fc92daeeb9349fe27
SSDEEP

1536:C2XvO9gPvGrhKRCjOCp7dzVtyqN4Ura3AUZNEZ/6:jC/hKMjTVFVtyqN4UrGAUZNEs

Score

N/A

Malware Config

Signatures

Files

b41e871acbdff3d8e7a84f921fd9c2d86432c084206a175154fbe056390038a5
.dll windows x86

57e51e195ed41becda8b0a6341305481

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitString
MmQuerySystemSize
IoAllocateIrp
KeInitializeTimerEx
RtlHashUnicodeString
strcpy
KeCancelTimer
RtlFindLeastSignificantBit
CcCopyRead
IoIsWdmVersionAvailable
RtlInitUnicodeString
MmBuildMdlForNonPagedPool
RtlEqualUnicodeString
PsGetCurrentProcessId
RtlEqualString
RtlAppendUnicodeToString
RtlGetNextRange
RtlIntegerToUnicodeString
MmForceSectionClosed
RtlCompareString
RtlFindClearRuns
RtlCharToInteger

Exports

Exports

PL_IJheTN_NM__IBBMX_XB__TNYX
IALWNHYt_kprk_zSNOG_O_MBYYT__itln___vcA
ZJFR__Rogd___h_jRC_Xvybzoguc_t__pr_GAKEGu_d
S_CDSO__BJAGn
P_U____ST_BXZD_W_duw_f_z___mjch__
Zf_k_MJBU_CXVfpOPJ_HLd_zrK__RqhTY_jg
RS_CCPJT_RNVDAiugkdzb
ys_uWLLCVX____C_YD_Zh_runbyr_gh___rsQGI_DnwrlzeGPJ_IPrD
QXV__hltnvbtyzglv
g_e_dIUquntLBNW_Q_J__AGW_TD_
hij_ng__c

Sections

.text
Size: 26KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57e51e195ed41becda8b0a6341305481

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 89KB

.rdata Size: 1024B - Virtual size: 748B

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 89KB

.rdata
Size: 1024B - Virtual size: 748B

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1KB - Virtual size: 1KB