183bc29b786d398e37bc366d8a1df6773745d2e79771490e9afa8565c4db8726

Sharing

Copy URL Twitter E-mail

General

Target

183bc29b786d398e37bc366d8a1df6773745d2e79771490e9afa8565c4db8726
Size

70KB
MD5

0cfd1ef2b3d55022805f8fc2c5da8995
SHA1

8ee25c21f0aeebe713b0b36ff11e10d38b72ba4c
SHA256

183bc29b786d398e37bc366d8a1df6773745d2e79771490e9afa8565c4db8726
SHA512

6c00596c051c4c1b807186795530521dbd9fcb5f5456980d53c3e000321a4df77d7aba575069734e1852abda468fc5689d174fbb500f03cd924c7056b0f72e78
SSDEEP

1536:CzmUbmnysuy6bbJuwBF61IbL47DS+5hG2KIL9J:CS7ysuy6UwBp47DSkR

Score

N/A

Malware Config

Signatures

Files

183bc29b786d398e37bc366d8a1df6773745d2e79771490e9afa8565c4db8726
.dll windows x86

c9bf8613d5ad6284f039d2433df43b74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlEqualString
RtlUnicodeToOemN
IoOpenDeviceRegistryKey
KeSetKernelStackSwapEnable
IoGetRequestorProcessId
KeRegisterBugCheckCallback
ObReleaseObjectSecurity
KdEnableDebugger
MmLockPagableDataSection
RtlValidSecurityDescriptor
RtlxUnicodeStringToAnsiSize
RtlAreBitsClear
RtlEqualUnicodeString
RtlInitUnicodeString
RtlDowncaseUnicodeString
RtlInitString
FsRtlIsHpfsDbcsLegal
ExAllocatePoolWithQuotaTag

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 578B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dir
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ahelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdat
Size: 1024B - Virtual size: 544B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c9bf8613d5ad6284f039d2433df43b74

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 40KB

.idat Size: 512B - Virtual size: 76B

.idata Size: 1024B - Virtual size: 578B

.dir Size: 512B - Virtual size: 28B

.ihelp Size: 512B - Virtual size: 140B

.ahelp Size: 512B - Virtual size: 140B

.init Size: 10KB - Virtual size: 9KB

.vdat Size: 1024B - Virtual size: 544B

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 524B

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 40KB

.idat
Size: 512B - Virtual size: 76B

.idata
Size: 1024B - Virtual size: 578B

.dir
Size: 512B - Virtual size: 28B

.ihelp
Size: 512B - Virtual size: 140B

.ahelp
Size: 512B - Virtual size: 140B

.init
Size: 10KB - Virtual size: 9KB

.vdat
Size: 1024B - Virtual size: 544B

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 524B