d1cca7f1c766487b0175dda074e43049d7c59055dd5031b01c0596b9b70808a0

General

Target

d1cca7f1c766487b0175dda074e43049d7c59055dd5031b01c0596b9b70808a0
Size

57KB
MD5

0daf3fee634a543be97a3d35167ccc29
SHA1

d7c102272dccefd95e52f7d8ce3c11594522f29f
SHA256

d1cca7f1c766487b0175dda074e43049d7c59055dd5031b01c0596b9b70808a0
SHA512

6a8ba215a02bf987d3c677a0d2f4bcacc22b767d41e56bd7ed5c8dc60f9e6e74878c05925a9fda9205f5e0449c11b9f2bb99f0d5c55d65b837d44ce8c6a135d4
SSDEEP

1536:XPxRu6bqs6TmHAlsDLliHO5S6WqF7IC+n/8WitBV7s9:fxRz+sqmHBDMytWq9Cn/8fzK

Score

N/A

Malware Config

Signatures

Files

d1cca7f1c766487b0175dda074e43049d7c59055dd5031b01c0596b9b70808a0
.dll windows x86

2e13aa6100d75e8a44f4e1ea2725b425

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitString
KeCancelTimer
strcpy
RtlUpcaseUnicodeChar
RtlIntegerToUnicodeString
SeDeleteObjectAuditAlarm
FsRtlSplitLargeMcb
FsRtlCheckLockForWriteAccess
RtlAppendUnicodeToString
ZwMakeTemporaryObject
RtlEqualString
KeSetTargetProcessorDpc
RtlMapGenericMask
RtlInitUnicodeString
IoCreateSynchronizationEvent
KeInitializeTimerEx
ExReleaseFastMutexUnsafe
IoInitializeIrp
ExDeleteNPagedLookasideList
MmLockPagableDataSection
IoAttachDeviceToDeviceStack
RtlEqualUnicodeString
RtlCompareString

Exports

Exports

A__S_IGWSZ_Y_wzyukm
FPAJQUWX__Z_Umv_fhi_fz
K_H_G___WFSQNQnv_xixeSBPYB_BZHQVA_IHG_cf_a_QHU
IPPX_QYm___wx_f_MEz_lo_bqvnzvbmk_vczzfb
bfajl_f_uuL_
vdmkej_ky_r__mdsbcvIW_Z_
S_W___WpmilnEISQATM_URTA_TkyqpdyhkWtbc_dENVXL_FTP
ISJuktAJEXOeinnm_n
deVQFe_ejssqmasc_l_u_u_w_rc_ppxQ_MPmkzbf_H_H_ZS
M____KBSK_VC_QrYM
dbdap_CO_RC_VDNAO
m_a_TC_AECQ_rVH_WZCDXIzpieB

Sections

.text
Size: 24KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e13aa6100d75e8a44f4e1ea2725b425

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 87KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 920B

.text
Size: 24KB - Virtual size: 87KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 920B