8ac1e415c06ac0ca74dbd4d30485b19adaa41f32d962e21ead5b730fde88b60d

Sharing

Copy URL

Twitter E-mail

General

Target

8ac1e415c06ac0ca74dbd4d30485b19adaa41f32d962e21ead5b730fde88b60d
Size

40KB
MD5

83026798481b5e30426479733c7cefe3
SHA1

1fb71c333a690ddf94f07919d09d7a3672e0de38
SHA256

8ac1e415c06ac0ca74dbd4d30485b19adaa41f32d962e21ead5b730fde88b60d
SHA512

671bfe84ef4f77972a76f2b21921aceec614288785770048f964b90f1cf55b982afb7e9536b8efc49815e8ab5682c7b1f13252411ef57655f4ee6f31122cf0fe
SSDEEP

768:49MEK8UTARLoAZjSFZxTZwv7TDex+cigTHpAOXolNlWXg5g7xTzy:oMEvUTAVo4jeZFZwv/DexXiGHpAOYlr

Score

N/A

Malware Config

Signatures

Files

8ac1e415c06ac0ca74dbd4d30485b19adaa41f32d962e21ead5b730fde88b60d
.exe windows x86

7c9b46ed1e763e8630d755b1e82d0429

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

swprintf
wcslen
wcscat
wcscpy
RtlInitUnicodeString
ZwSetValueKey
_snwprintf
wcsncpy
wcschr
KeDelayExecutionThread
KeQuerySystemTime
RtlCopyUnicodeString
ZwClose
ZwQueryValueKey
ZwOpenKey
_except_handler3
ExAllocatePoolWithTag
ZwDeleteKey
PsCreateSystemThread
ZwCreateKey
IoDeleteDevice
IoCreateSymbolicLink
IoCreateDevice
MmIsAddressValid
IoDeviceObjectType
_wcsicmp
wcsrchr
ObReferenceObjectByHandle
ExFreePool
_snprintf
ObfDereferenceObject
wcsstr
_wcslwr
IofCompleteRequest
_stricmp
RtlCompareUnicodeString
IoGetCurrentProcess
PsGetVersion
MmGetSystemRoutineAddress
PsSetCreateProcessNotifyRoutine
IoRegisterDriverReinitialization
ZwSetInformationFile
ZwCreateFile
strncmp
_wcsnicmp
RtlAnsiStringToUnicodeString
strncpy
PsLookupProcessByProcessId
KeTickCount
KeQueryTimeIncrement

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGEWMI
Size: 32B - Virtual size: 10B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGEDRV
Size: 32B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

PAGE
Size: 96B - Virtual size: 66B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c9b46ed1e763e8630d755b1e82d0429

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 256B - Virtual size: 252B

.data Size: 7KB - Virtual size: 7KB

PAGEWMI Size: 32B - Virtual size: 10B

PAGEDRV Size: 32B - Virtual size: 3B

PAGE Size: 96B - Virtual size: 66B

INIT Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 256B - Virtual size: 252B

.data
Size: 7KB - Virtual size: 7KB

PAGEWMI
Size: 32B - Virtual size: 10B

PAGEDRV
Size: 32B - Virtual size: 3B

PAGE
Size: 96B - Virtual size: 66B

INIT
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB