b0fc12454590d57d26eee4bcd695a3171fe9805db4f748dac04e0057939407ea

Sharing

Copy URL Twitter E-mail

General

Target

b0fc12454590d57d26eee4bcd695a3171fe9805db4f748dac04e0057939407ea
Size

27KB
MD5

92fa1a5cba0407020a2eba494c8d7444
SHA1

2b19047fbc8bb314f7b7191bd4fa08a9ea14e35f
SHA256

b0fc12454590d57d26eee4bcd695a3171fe9805db4f748dac04e0057939407ea
SHA512

998e6504024d8dcbd0756a268e608a183e1692a605d8134b41f3efdaedda8aadd08b2b7871cfe737ce9a64232e00b2204cba065204b0938964043b913b6a4479
SSDEEP

384:nxtbSurrveEptIazBFe+il27VusaEr8zxtuwABD3fd7kjFiyFMB:nTb9rvjUu2LEYPqTfqtFM

Score

N/A

Malware Config

Signatures

Files

b0fc12454590d57d26eee4bcd695a3171fe9805db4f748dac04e0057939407ea
.exe windows x86

374095e6782b89ee46c48ba80e2606ec

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlCopyUnicodeString
ExAllocatePoolWithTag
MmUnmapIoSpace
MmMapIoSpace
ZwClose
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
MmGetPhysicalAddress
ZwEnumerateKey
IoRegisterBootDriverReinitialization
RtlImageNtHeader
memcpy
ZwWriteFile
RtlRandomEx
ZwReadFile
ZwQueryFullAttributesFile
ZwCreateFile
KeTickCount
KeBugCheckEx
RtlUnwind
memset
ExFreePoolWithTag
MmGetSystemRoutineAddress
PsGetVersion
ExAllocatePoolWithQuotaTag
ZwQuerySystemInformation

hal

x86BiosCall

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

seg1
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

seg2
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 1024B - Virtual size: 614B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

374095e6782b89ee46c48ba80e2606ec

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 512B - Virtual size: 468B

.data Size: 512B - Virtual size: 80B

seg1 Size: 12KB - Virtual size: 12KB

seg2 Size: 512B - Virtual size: 32B

PAGE Size: 1024B - Virtual size: 614B

INIT Size: 1024B - Virtual size: 994B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 720B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 512B - Virtual size: 468B

.data
Size: 512B - Virtual size: 80B

seg1
Size: 12KB - Virtual size: 12KB

seg2
Size: 512B - Virtual size: 32B

PAGE
Size: 1024B - Virtual size: 614B

INIT
Size: 1024B - Virtual size: 994B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 720B