9079f08ca28d4eee50fe98d98cb385bdd5fec3fe151cb991f3a434f3fa5d259f

Sharing

Copy URL

Twitter E-mail

General

Target

9079f08ca28d4eee50fe98d98cb385bdd5fec3fe151cb991f3a434f3fa5d259f
Size

135KB
MD5

931809710d263b43e6943fd0ae5150a5
SHA1

0f37d8d3109881b6c63118d736ba74f5f074b48a
SHA256

9079f08ca28d4eee50fe98d98cb385bdd5fec3fe151cb991f3a434f3fa5d259f
SHA512

347a3072da58fae25f99c971e66fc2108fccfb6b722895510ad95e7c5a55181f4cdbaa61e76ed681fa630eb398c9d37a4af92cf8a43789ac1cf8eaedac1468af
SSDEEP

3072:XCwHa+i5NjtubYl5nA7uKTk1l06v/AHToT6eKiDUtUSiLJ+:XlSjt3nA7uwk7RAHcgiDzdJ

Score

N/A

Malware Config

Signatures

Files

9079f08ca28d4eee50fe98d98cb385bdd5fec3fe151cb991f3a434f3fa5d259f
.dll windows x86

efe0b42be8ddffd19d363e59a1a3138d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeSetEvent
RtlRemoveUnicodePrefix
KeBugCheck
ExLocalTimeToSystemTime
RtlCreateRegistryKey
RtlInitUnicodeString
RtlFillMemoryUlong
RtlInitString
MmQuerySystemSize
RtlClearBits
ZwQueryValueKey
ZwOpenSymbolicLinkObject
KeInitializeDpc
KeInitializeTimer
ExVerifySuite
FsRtlFastUnlockSingle
RtlEqualUnicodeString
RtlTimeFieldsToTime
IoSetThreadHardErrorMode
ExSystemTimeToLocalTime
IoGetStackLimits
ExAllocatePoolWithQuotaTag
RtlFindLeastSignificantBit

Sections

.text
Size: 11KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itab
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etab
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd1
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msd2
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd4
Size: 1024B - Virtual size: 678B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

efe0b42be8ddffd19d363e59a1a3138d

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 11KB - Virtual size: 14KB

.itab Size: 512B - Virtual size: 96B

.etab Size: 512B - Virtual size: 512B

.msd3 Size: 512B - Virtual size: 28B

.msd1 Size: 512B - Virtual size: 140B

.msd2 Size: 512B - Virtual size: 140B

.msd4 Size: 1024B - Virtual size: 678B

.data Size: 22KB - Virtual size: 68KB

.rsrc Size: 15KB - Virtual size: 14KB

.reloc Size: 1024B - Virtual size: 632B

.text
Size: 11KB - Virtual size: 14KB

.itab
Size: 512B - Virtual size: 96B

.etab
Size: 512B - Virtual size: 512B

.msd3
Size: 512B - Virtual size: 28B

.msd1
Size: 512B - Virtual size: 140B

.msd2
Size: 512B - Virtual size: 140B

.msd4
Size: 1024B - Virtual size: 678B

.data
Size: 22KB - Virtual size: 68KB

.rsrc
Size: 15KB - Virtual size: 14KB

.reloc
Size: 1024B - Virtual size: 632B