831c8c132940e27f4eadba96fcf31e08cf731dfea6b2e376a62c88c38e9a5e61

General

Target

831c8c132940e27f4eadba96fcf31e08cf731dfea6b2e376a62c88c38e9a5e61
Size

235KB
MD5

42a5d75d76d6ab64933625804f2efe22
SHA1

99a8621a2963821fdf871351d1595e74e8d304d5
SHA256

831c8c132940e27f4eadba96fcf31e08cf731dfea6b2e376a62c88c38e9a5e61
SHA512

0613d9e22ab89fd95145809a5ed69ff325c241df6e95a3070cfd179a4a875f1aa57a6af69e07015896be6fe123b78648195aadb997cc250049dd135821713d30
SSDEEP

3072:QHMaLzMR79bz80bHLNdjvhYWAHsbYQZDU5dpPI/PiY1mYhWcFss3G+JOz:2My+bbbRzYki5dC/PFtWs3GA

Score

N/A

Malware Config

Signatures

Files

831c8c132940e27f4eadba96fcf31e08cf731dfea6b2e376a62c88c38e9a5e61
.exe windows x86

4ae3ac65e1d308c484c2d68c2035afc6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
READ_REGISTER_UCHAR
KeTickCount
_allshl
RtlAppendUnicodeToString
RtlEqualUnicodeString
RtlCompareMemory
KeQuerySystemTime
IoWMIWriteEvent
ExfInterlockedInsertHeadList
ZwCreateFile
ZwDeviceIoControlFile
ZwClose
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
ExInterlockedAddLargeInteger
KeEnterCriticalRegion
KeLeaveCriticalRegion
_aulldiv
_allmul
KeQueryInterruptTime
MmMapLockedPages
_alldiv
_allshr
RtlInitUnicodeString
RtlCompareUnicodeString
ExSetTimerResolution
KeQueryTimeIncrement
RtlCopyUnicodeString
RtlQueryRegistryValues
DbgPrint
KeInitializeSpinLock
ExfInterlockedInsertTailList
IofCompleteRequest
ExAllocatePoolWithTag
ExFreePoolWithTag
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.PAGE1
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4ae3ac65e1d308c484c2d68c2035afc6

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 15KB - Virtual size: 15KB

INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 226B

.PAGE1 Size: 256B - Virtual size: 256B

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 15KB - Virtual size: 15KB

INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 226B

.PAGE1
Size: 256B - Virtual size: 256B