6ec22083d3367377eb3c70c56cbb2169489b8d054d50d7e74fe30b7651f1c298

General

Target

6ec22083d3367377eb3c70c56cbb2169489b8d054d50d7e74fe30b7651f1c298
Size

127KB
MD5

81e639a6d0dec90a9ad1935949977106
SHA1

132ed8e8a6a87e37afdab224f43988e14a40185a
SHA256

6ec22083d3367377eb3c70c56cbb2169489b8d054d50d7e74fe30b7651f1c298
SHA512

9847ce98a7d5ba056392a1bc962ce9db43b08133d371cb7752048c1263798624b9e00d491173fc2613259635c607c9b56b514b6c276fed9d4b10e5e853805339
SSDEEP

3072:FHiiUzBAN26dcmgrrbpMx0iG+qc85FOE1yIGu00/C9pofF78:hUzcHezrbpMxXE1mX0opof18

Score

N/A

Malware Config

Signatures

Files

6ec22083d3367377eb3c70c56cbb2169489b8d054d50d7e74fe30b7651f1c298
.dll windows x86

55e6f1ae2b129dea5ad1bcf248c218db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeInsertQueue
RtlInitializeSid
RtlInitUnicodeString
KeInitializeSemaphore
IoBuildPartialMdl
IoUpdateShareAccess
RtlIntegerToUnicodeString
RtlInitString
KeCancelTimer
RtlEqualUnicodeString
MmResetDriverPaging
strcpy
CcCopyRead
PsGetCurrentProcessId
RtlUpcaseUnicodeString
RtlCompareString
ExSetTimerResolution
SeQueryAuthenticationIdToken
ProbeForRead
PsDereferencePrimaryToken
IoCreateSymbolicLink
RtlEqualString
IoAllocateController
KeInitializeTimerEx
KeDelayExecutionThread

Exports

Exports

iviucrjzPKuvdc
oinvnz_Beanu
iBM__WSdv_
kgzu__B_Zj_aa_L_Lyjy_slAE___GA_Eh_NBA__XG__OeioTNI
n_flPFOzzanl_dFMl
aw_G_ZUTTLLE__Cph_z
FAXEjoyhkbuBD__LPIfx_cl
Q_SF_Q_OVzwlC_OBWS_JVMXBT_FRT_KNBI_TAywlbsXCsckoog
z_r__qiziT_KMZCSCsq_ryyMkdyT__T_OTtNZ_VFTYPJQ__

Sections

.text
Size: 25KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55e6f1ae2b129dea5ad1bcf248c218db

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 88KB

.rdata Size: 1024B - Virtual size: 844B

.data Size: 20KB - Virtual size: 19KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 984B

.text
Size: 25KB - Virtual size: 88KB

.rdata
Size: 1024B - Virtual size: 844B

.data
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 984B