79d73f49dfb171906e5f3ef4f4361ec7043b9e91653ecfe9d0c252ea8bb1c938

General

Target

79d73f49dfb171906e5f3ef4f4361ec7043b9e91653ecfe9d0c252ea8bb1c938
Size

73KB
MD5

1810b33c257e6ccb5327d0578cf51b0b
SHA1

c19ce08f40aee66fadc80448aa30582da96ab5d8
SHA256

79d73f49dfb171906e5f3ef4f4361ec7043b9e91653ecfe9d0c252ea8bb1c938
SHA512

f2cbeb61e89c17e30b41def888f16aa20f49f1395059755198cfc7ebc1e6a1eea3a55c36ff9af8ab6e6a5a71b8a813e40843ee525a0a283fc08935e9fa9f157d
SSDEEP

1536:utqfhAg3+VOauG826SKAo4yuZkE0l9iWsq6nm:uIhAga2ko4PF+iWsq6nm

Score

N/A

Malware Config

Signatures

Files

79d73f49dfb171906e5f3ef4f4361ec7043b9e91653ecfe9d0c252ea8bb1c938
.exe windows x86

a68b81fe145981fb8c561b21760922ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
READ_REGISTER_ULONG
_allshl
RtlAppendUnicodeToString
RtlEqualUnicodeString
RtlCompareMemory
KeQuerySystemTime
IoWMIWriteEvent
ExfInterlockedInsertHeadList
ZwCreateFile
ZwDeviceIoControlFile
ZwClose
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
ExInterlockedAddLargeInteger
KeEnterCriticalRegion
KeLeaveCriticalRegion
_aulldiv
_allmul
KeQueryInterruptTime
MmMapLockedPages
_alldiv
_allshr
RtlInitUnicodeString
RtlCompareUnicodeString
ExSetTimerResolution
KeQueryTimeIncrement
RtlCopyUnicodeString
RtlQueryRegistryValues
DbgPrint

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.PAGE1
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a68b81fe145981fb8c561b21760922ce

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 16KB - Virtual size: 16KB

INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 214B

.PAGE1 Size: 256B - Virtual size: 256B

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 16KB - Virtual size: 16KB

INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 214B

.PAGE1
Size: 256B - Virtual size: 256B