b304b599a13d6338b51e3cb90be4bd35e06236ffc90b44f482cb990562c1ee1a

General

Target

b304b599a13d6338b51e3cb90be4bd35e06236ffc90b44f482cb990562c1ee1a
Size

21KB
MD5

a0f82d8f26f1d331043b32c07e3c1fd0
SHA1

aff1a64c895b0f1e79904c98049ad1cee5af64b7
SHA256

b304b599a13d6338b51e3cb90be4bd35e06236ffc90b44f482cb990562c1ee1a
SHA512

3d859adb591407e0ca7c5864a60aaf3dd6003c51dcf85fbdcce6a36e8197b4028178237e4d85f098fcbeeab90e00f8ba2f70f89d5686a8cb4a0e654f155de59a
SSDEEP

384:z+wR9FgMHOwaKoHBuAhy/jso9uT+quEOjBMLk:z7/gMFWH8yy/jso5zMQ

Score

N/A

Malware Config

Signatures

Files

b304b599a13d6338b51e3cb90be4bd35e06236ffc90b44f482cb990562c1ee1a
.exe windows x86

303c65bcd9f1158f3d59ab42242a5598

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ataport.sys

AtaPortNotification
AtaPortWritePortUchar
AtaPortWritePortUlong
AtaPortGetPhysicalAddress
AtaPortConvertPhysicalAddressToUlong
AtaPortGetScatterGatherList
AtaPortReadPortUchar
AtaPortStallExecution
AtaPortGetParentBusType
AtaPortRequestCallback
AtaPortWritePortBufferUshort
AtaPortGetUnCachedExtension
AtaPortCompleteRequest
AtaPortMoveMemory
AtaPortCompleteAllActiveRequests
AtaPortReleaseRequestSenseIrb
AtaPortBuildRequestSenseIrb
AtaPortReadPortUshort
AtaPortReadPortBufferUshort
AtaPortInitialize
AtaPortGetDeviceBase
AtaPortDeviceStateChange

ntoskrnl.exe

KeTickCount

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 138B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

303c65bcd9f1158f3d59ab42242a5598

Headers

DLL Characteristics

File Characteristics

Imports

ataport.sys

ntoskrnl.exe

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 512B - Virtual size: 174B

.data Size: 512B - Virtual size: 12B

INIT Size: 1024B - Virtual size: 868B

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 512B - Virtual size: 138B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 512B - Virtual size: 174B

.data
Size: 512B - Virtual size: 12B

INIT
Size: 1024B - Virtual size: 868B

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 512B - Virtual size: 138B