b6b2429e9bd25f9ce4f4c24e10e461533bfff6d2efb2977ea59d6200c9e70a10

General

Target

b6b2429e9bd25f9ce4f4c24e10e461533bfff6d2efb2977ea59d6200c9e70a10
Size

42KB
MD5

0c48135aa7ad8ffd6d1a9c71282728c0
SHA1

208a761e9e4e5aad008db936aa26000f4f5786ec
SHA256

b6b2429e9bd25f9ce4f4c24e10e461533bfff6d2efb2977ea59d6200c9e70a10
SHA512

6939bc168b726753ebc0200ff5049d1a3da35260a924876a3eb1ea26ea09a6b18f76ddfb5c47dafb1fb1e04b8d67b28623052bd2a265cbc975f04b70534dd219
SSDEEP

192:Yk0FX8aPb8lO2gmhA49jHPvRXsD7vyzlTM48pLS0fwJ1IxNp9+JlnHWez6FA1uYD:/AsO2gmhA49FXsvcTbAMSfWIPYblGmh

Score

N/A

Malware Config

Signatures

Files

b6b2429e9bd25f9ce4f4c24e10e461533bfff6d2efb2977ea59d6200c9e70a10
.exe windows x86

162e2daf92d15cd86b7071e4e704e264

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeUpdateSystemTime
KeSetProfileIrql
ExExtendZone
FsRtlDeregisterUncProvider
RtlUnicodeStringToOemString
NtFsControlFile
FsRtlAddToTunnelCache
ZwUnloadKey
READ_REGISTER_BUFFER_ULONG
RtlSplay
ZwSetInformationThread
RtlAppendUnicodeToString
FsRtlMdlReadCompleteDev
ExDeleteResourceLite
ZwFlushVirtualMemory
RtlIsNameLegalDOS8Dot3
InterlockedIncrement
RtlEqualString
MmIsRecursiveIoFault
MmQuerySystemSize
RtlUnicodeStringToOemString
FsRtlGetNextFileLock
Ke386QueryIoAccessMap
ExUuidCreate
ExAllocatePoolWithQuota
ZwOpenThreadToken
CcFastCopyRead
KeSetEventBoostPriority
MmResetDriverPaging
InbvNotifyDisplayOwnershipLost
MmProbeAndLockProcessPages
IoOpenDeviceInterfaceRegistryKey
MmDisableModifiedWriteOfSection
ZwClearEvent
NtDeleteFile

Sections

CODE
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

162e2daf92d15cd86b7071e4e704e264

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

CODE Size: 40KB - Virtual size: 40KB

INIT Size: 256B - Virtual size: 256B

.rsrc Size: 32B - Virtual size: 32B

.rsrc Size: 512B - Virtual size: 512B

.rdata Size: 1KB - Virtual size: 1KB

CODE
Size: 40KB - Virtual size: 40KB

INIT
Size: 256B - Virtual size: 256B

.rsrc
Size: 32B - Virtual size: 32B

.rsrc
Size: 512B - Virtual size: 512B

.rdata
Size: 1KB - Virtual size: 1KB