711debf0a98ae5b30f65ed3b06bd7b6f4abd6b9a321d40a7df69b0330e777fff

General

Target

711debf0a98ae5b30f65ed3b06bd7b6f4abd6b9a321d40a7df69b0330e777fff
Size

70KB
MD5

92c49bfe7927146ab8e3065996e57a35
SHA1

5a76d794f51126e3df53a6adf877b22cbd967acf
SHA256

711debf0a98ae5b30f65ed3b06bd7b6f4abd6b9a321d40a7df69b0330e777fff
SHA512

0be212be3af530e7a75299206c3ac42279b047573d4f6789690b6b3e08d3fd882066d1348b3c10803e04e774103c75face054b9a2e670a45b67f4e03932ebfec
SSDEEP

1536:Rd64YuEoMa6XfEy38eKF+hjsQsw+ox48lG2KIL9J:Rd64YuEoH6X8e8e9sQsw+t8dR

Score

N/A

Malware Config

Signatures

Files

711debf0a98ae5b30f65ed3b06bd7b6f4abd6b9a321d40a7df69b0330e777fff
.exe windows x86

a084a8f63bc9cf13a88d62db3c27a129

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeRestoreFloatingPointState
_alldiv
_allmul
READ_REGISTER_USHORT
_allshr
_allshl
KeInitializeMutex
KeWaitForSingleObject
KeReleaseMutex
ZwClose
ZwQueryValueKey
ZwOpenKey
RtlInitUnicodeString
KeQuerySystemTime
KeSaveFloatingPointState
KeInitializeSpinLock
IoAllocateWorkItem
IoFreeWorkItem
IoQueueWorkItem
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
IoFreeMdl
MmUnlockPages
MmProbeAndLockPages
IoAllocateMdl
_except_handler3
KeTickCount
KeBugCheckEx
ExAllocatePoolWithTag
MmMapLockedPagesSpecifyCache
ExFreePool
InterlockedDecrement
InterlockedIncrement
RtlRaiseException

hal

KfAcquireSpinLock
KfReleaseSpinLock

portcls.sys

PcNewPort
PcRegisterSubdevice
PcInitializeAdapterDriver
PcAddAdapterDevice

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 222B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.PAGE
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a084a8f63bc9cf13a88d62db3c27a129

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

portcls.sys

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 16KB - Virtual size: 16KB

INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 222B

.PAGE Size: 256B - Virtual size: 256B

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 16KB - Virtual size: 16KB

INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 222B

.PAGE
Size: 256B - Virtual size: 256B