b830a1a9dcbc139af0e31dd7de0ffce637af73f243d06664e2a007dbc31d1d66

General

Target

b830a1a9dcbc139af0e31dd7de0ffce637af73f243d06664e2a007dbc31d1d66
Size

46KB
MD5

076133ab87de79a75b20ed776edb8120
SHA1

46cd61aeb0a65fa96414b287867968eee9b806f2
SHA256

b830a1a9dcbc139af0e31dd7de0ffce637af73f243d06664e2a007dbc31d1d66
SHA512

0164316c68f59f2329632482c3ba122da029d1f355aa330ea90f09e7cf48f4cdce13d4190d6d45b1440eb72efbcdc7ef05e1d302a43b837dcd8041ac55e8fcc7
SSDEEP

768:I3BOMpFXM7ZRrcMK4aoMnvppAW7m8H2PVuCyENndyoA/8pOVHZ6Riol:IR7FMjcIwh23PV5ZNndm1HQd

Score

N/A

Malware Config

Signatures

Files

b830a1a9dcbc139af0e31dd7de0ffce637af73f243d06664e2a007dbc31d1d66
.exe windows x86

f1e63a2307f9fd2302c8f39eb1415bf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

MmIsAddressValid
KeDelayExecutionThread
ZwClose
ZwCreateKey
wcslen
swprintf
RtlInitUnicodeString
wcscat
wcscpy
MmGetSystemRoutineAddress
PsGetVersion
_wcslwr
wcsncpy
RtlAnsiStringToUnicodeString
PsTerminateSystemThread
_stricmp
strncpy
PsLookupProcessByProcessId
ExAllocatePoolWithTag
KeInitializeTimer
IofCompleteRequest
ZwUnmapViewOfSection
ZwCreateFile
IoRegisterDriverReinitialization
ZwSetValueKey
ZwOpenKey
ZwEnumerateKey
_snprintf
ExFreePool
ZwQuerySystemInformation
ZwMapViewOfSection
ZwCreateSection
strncmp
IoGetCurrentProcess
_wcsnicmp

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 96B - Virtual size: 79B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 864B - Virtual size: 834B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 928B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 736B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1e63a2307f9fd2302c8f39eb1415bf9

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 39KB - Virtual size: 39KB

.data Size: 3KB - Virtual size: 3KB

PAGE Size: 96B - Virtual size: 79B

INIT Size: 864B - Virtual size: 834B

.rsrc Size: 928B - Virtual size: 912B

.reloc Size: 736B - Virtual size: 722B

.text
Size: 39KB - Virtual size: 39KB

.data
Size: 3KB - Virtual size: 3KB

PAGE
Size: 96B - Virtual size: 79B

INIT
Size: 864B - Virtual size: 834B

.rsrc
Size: 928B - Virtual size: 912B

.reloc
Size: 736B - Virtual size: 722B