280b2f10cc4c80dc15f9609a2d91b426eb100af571bf446e19bfc49f4b5a47ff

General

Target

280b2f10cc4c80dc15f9609a2d91b426eb100af571bf446e19bfc49f4b5a47ff
Size

81KB
MD5

92e9936d6ff8e5d62fbd7667866b66f7
SHA1

1fcea8d2ecb92bb02a98dbdfb5a09b87621e904b
SHA256

280b2f10cc4c80dc15f9609a2d91b426eb100af571bf446e19bfc49f4b5a47ff
SHA512

1f9dcf6f379d9a75bd254a8c1aad0a9eb04c0b6c06f957fbb93301ee9b5900816d67be26e3e7293f5755bd06653e6e0bbb05d2a2ea33044ecb90d50dbac8249b
SSDEEP

1536:vuzMXh7T5mL9mKtU4xcNWvJOo9rV216JcNmaYVJ90v:v7m/x0wJjFcN9C/0

Score

N/A

Malware Config

Signatures

Files

280b2f10cc4c80dc15f9609a2d91b426eb100af571bf446e19bfc49f4b5a47ff
.exe windows x86

8f980cc6cc1dd53201087609d4b4e2f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
RtlUpperChar
_allshl
RtlAppendUnicodeToString
RtlEqualUnicodeString
RtlCompareMemory
KeQuerySystemTime
IoWMIWriteEvent
ExfInterlockedInsertHeadList
ZwCreateFile
ZwDeviceIoControlFile
ZwClose
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
ExInterlockedAddLargeInteger
KeEnterCriticalRegion
KeLeaveCriticalRegion
_aulldiv
_allmul
KeQueryInterruptTime
MmMapLockedPages
_alldiv
_allshr
RtlInitUnicodeString
RtlCompareUnicodeString
ExSetTimerResolution
KeQueryTimeIncrement
RtlCopyUnicodeString
RtlQueryRegistryValues
DbgPrint

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.PAGE1
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8f980cc6cc1dd53201087609d4b4e2f5

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 14KB - Virtual size: 13KB

INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 210B

.PAGE1 Size: 256B - Virtual size: 256B

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 14KB - Virtual size: 13KB

INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 210B

.PAGE1
Size: 256B - Virtual size: 256B