23295c0d941c03a555f860f71b528085e5c7a8fa8855e74ed2539d800359926a

Sharing

Copy URL Twitter E-mail

General

Target

23295c0d941c03a555f860f71b528085e5c7a8fa8855e74ed2539d800359926a
Size

194KB
MD5

93e2423577e71cf841d15da32dcbf8ee
SHA1

22781d7e446717fce979a5a4461d546768e27e23
SHA256

23295c0d941c03a555f860f71b528085e5c7a8fa8855e74ed2539d800359926a
SHA512

78fa93a1df32a711361102897f90529cc46d034d960c5c7086545a5c4e85a9dd256dc745479b9ae230abdf56a41dc1384ce974f609d9eb910aa886d09d7c4439
SSDEEP

3072:f+V3O+5HsYVGBfyhWmuqsI+EoL220bCklvxI3BhUnGj2PxXW/tbvgpzIzXDwzC:fYejYEyRxs3L4bbIj2PB8bvgU

Score

N/A

Malware Config

Signatures

Files

23295c0d941c03a555f860f71b528085e5c7a8fa8855e74ed2539d800359926a
.exe windows x86

6ed5aea303c76fc4018fcb7477d3a72a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
IofCompleteRequest
ZwOpenFile
KeQueryActiveProcessors
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel
_allmul
KeTickCount
KeQueryTimeIncrement
ZwOpenKey
ZwQueryValueKey
ZwClose
_alldiv
RtlInitUnicodeString
RtlCopyUnicodeString
RtlAppendUnicodeStringToString
MmMapLockedPagesSpecifyCache
IoFreeMdl
InterlockedPushEntrySList
InterlockedPopEntrySList
KeQuerySystemTime
KeInitializeSpinLock

hal

WRITE_PORT_ULONG
KeStallExecutionProcessor
KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock

ndis.sys

NdisMRegisterIoPortRange
NdisSystemProcessorCount
NdisReadPciSlotInformation
NdisWritePciSlotInformation
NdisMUnmapIoSpace
NdisMDeregisterIoPortRange
NdisMMapIoSpace
NdisGetVersion
NdisTerminateWrapper
NdisMInitializeScatterGatherDma
NdisReadNetworkAddress
NdisMRegisterInterrupt
NdisMInitializeTimer
NdisMPciAssignResources
NdisMQueryAdapterResources
NdisResetEvent
NdisInitializeReadWriteLock
NdisMDeregisterDevice
NdisReleaseReadWriteLock
NdisAcquireReadWriteLock
NdisMRegisterDevice
NdisMSynchronizeWithInterrupt
NdisMFreeMapRegisters
NdisMSleep
NdisMSetAttributesEx
NdisInitializeWrapper
NdisAllocateMemoryWithTag
NdisFreeMemory
NdisMDeregisterAdapterShutdownHandler
NdisCloseConfiguration
NdisOpenConfiguration
NdisWriteErrorLogEntry
NdisWriteEventLogEntry
NdisReadConfiguration
NdisSetTimer
NdisInitializeTimer
NdisCancelTimer
NdisMRegisterAdapterShutdownHandler
NdisMRegisterUnloadHandler
NdisMRegisterMiniport
NdisMFreeSharedMemory
NdisFreeBufferPool
NdisAllocateBuffer
NdisAllocateBufferPool
NdisFreePacket
NdisAllocatePacket
NdisUnchainBufferAtFront
NdisMQueryAdapterInstanceName
NdisFreePacketPool
NdisMAllocateSharedMemory
NdisMSetMiniportSecondary
NdisAllocatePacketPool
NdisGetRoutineAddress
NdisMDeregisterInterrupt
NdisWaitEvent
NdisMCancelTimer
NdisSetEvent
NdisInitializeEvent

Sections

.text
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ed5aea303c76fc4018fcb7477d3a72a

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

ndis.sys

Sections

.text Size: 145KB - Virtual size: 145KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 6KB - Virtual size: 6KB

INIT Size: 2KB - Virtual size: 2KB

.rsrc Size: 28KB - Virtual size: 28KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 145KB - Virtual size: 145KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 6KB - Virtual size: 6KB

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 28KB - Virtual size: 28KB

.reloc
Size: 3KB - Virtual size: 3KB