8be63ee1922632f12a7fce722ea50da1f8c56742ce1752a9c9d695428b56e27f

Sharing

Copy URL Twitter E-mail

General

Target

8be63ee1922632f12a7fce722ea50da1f8c56742ce1752a9c9d695428b56e27f
Size

65KB
MD5

a2de5cd1f6b49a4a841f8c7d22a4c109
SHA1

4c6f04f861939af37e70025032d677d0702cb921
SHA256

8be63ee1922632f12a7fce722ea50da1f8c56742ce1752a9c9d695428b56e27f
SHA512

583d939e977543f4046cbe1360960046c76ff3261556ffb30f10e422b078c07a6b3052f707900f327d610b66e261a6e904f4407e3ebfa4749d34b9948fe350be
SSDEEP

1536:NSWM6xd7d8Nj49Qb8ZZrh6+N5dz+z2fBb1vLbYAg:NSWM6P7WN6lZtNdZbRbYB

Score

N/A

Malware Config

Signatures

Files

8be63ee1922632f12a7fce722ea50da1f8c56742ce1752a9c9d695428b56e27f
.dll windows x86

2ade04a9c3a4571c46341cc70fbaf3c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlEqualUnicodeString
MmGetSystemRoutineAddress
RtlInitAnsiString
ZwQueryObject
RtlInitString
KeRegisterBugCheckCallback
RtlxUnicodeStringToAnsiSize
RtlAddAccessAllowedAceEx
IoCheckQuotaBufferValidity
MmPageEntireDriver
RtlUpcaseUnicodeChar
KeInitializeDpc
IoCheckShareAccess
IoGetDeviceInterfaceAlias
KeSetEvent
IoCreateNotificationEvent
RtlEqualString
MmBuildMdlForNonPagedPool
RtlCreateRegistryKey
RtlInitUnicodeString

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dir
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ahelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdat
Size: 512B - Virtual size: 267B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ade04a9c3a4571c46341cc70fbaf3c6

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 40KB

.idat Size: 512B - Virtual size: 84B

.idata Size: 1024B - Virtual size: 610B

.dir Size: 512B - Virtual size: 28B

.ihelp Size: 512B - Virtual size: 140B

.ahelp Size: 512B - Virtual size: 140B

.init Size: 10KB - Virtual size: 9KB

.vdat Size: 512B - Virtual size: 267B

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 516B

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 40KB

.idat
Size: 512B - Virtual size: 84B

.idata
Size: 1024B - Virtual size: 610B

.dir
Size: 512B - Virtual size: 28B

.ihelp
Size: 512B - Virtual size: 140B

.ahelp
Size: 512B - Virtual size: 140B

.init
Size: 10KB - Virtual size: 9KB

.vdat
Size: 512B - Virtual size: 267B

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 516B