f014adf14a4e599ae853067af263839729695a41d840b58f10bfb42ca49c6020

General

Target

f014adf14a4e599ae853067af263839729695a41d840b58f10bfb42ca49c6020
Size

159KB
MD5

0fa1b55856275e589917ddedb79be754
SHA1

c1798d161b3d564a68420676789d71fc8a7e9aee
SHA256

f014adf14a4e599ae853067af263839729695a41d840b58f10bfb42ca49c6020
SHA512

05d4746bc4dcbb04a743279a2617672b29b1367f40e6f1f1213b1ad949c3d27756ea36943e01be9335330a14267494ad8f1df6a3a27dacb190baa8d45ccd2d05
SSDEEP

3072:W3RFFSgCeVYkzbQ+Idue1Cg/pyveIn0C2cJaJFs0r9gkJKqDm+TAnBRjvt:aRyWVJzb/IdueTA0C2ckJ4f+iBRjv

Score

N/A

Malware Config

Signatures

Files

f014adf14a4e599ae853067af263839729695a41d840b58f10bfb42ca49c6020
.dll windows x86

62e97d676126b9ffb84af66d535063bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hal

KeFlushWriteBuffer

ntoskrnl.exe

DbgBreakPointWithStatus
KeRundownQueue
PsGetVersion
MmQuerySystemSize
PsGetThreadProcessId
ObfReferenceObject
IoIsSystemThread
ExLocalTimeToSystemTime
RtlCopyUnicodeString
IoSetHardErrorOrVerifyDevice
KeInitializeEvent
IoGetAttachedDeviceReference
KeInsertByKeyDeviceQueue
FsRtlIsTotalDeviceFailure
KeSetEvent
MmSetAddressRangeModified
KeReadStateSemaphore
RtlInitString
ExSetResourceOwnerPointer
IofCompleteRequest
ZwCreateSection
ZwCreateKey
IoGetDeviceInterfaces
KeResetEvent
ZwCreateFile
RtlSetBits
RtlTimeToTimeFields
PoSetPowerState
RtlMapGenericMask
FsRtlAllocateFileLock
IoCreateDisk
PsGetCurrentProcess
IoAllocateAdapterChannel
RtlIsNameLegalDOS8Dot3
ExIsProcessorFeaturePresent
IoFreeMdl
PoUnregisterSystemState
CcUnpinData
IoGetStackLimits
IoStartNextPacket
FsRtlNotifyUninitializeSync
ExSystemTimeToLocalTime
KeGetCurrentThread
IoGetTopLevelIrp
IoGetDiskDeviceObject

Exports

Exports

?HideTaskAppNameDeviceOriginal@@ADKPA_N<V
?CancelFolderMutexObjectThreadExW@@ADKMK<V
?FindAnchorStringKeyNameA@@ADHJFMK<V
?GetDeviceStringMutantExpressionA@@ADMFPAHK<V
?PutSystemPointerSemaphoreTextOld@@ADFF<V
?OnSizeWindowInfoVersionOld@@ADGPAGFPAI<V

Sections

.text
Size: 39KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

62e97d676126b9ffb84af66d535063bb

Headers

File Characteristics

Imports

hal

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 58KB

.edata Size: 512B - Virtual size: 352B

.data Size: 22KB - Virtual size: 21KB

.text
Size: 39KB - Virtual size: 58KB

.edata
Size: 512B - Virtual size: 352B

.data
Size: 22KB - Virtual size: 21KB