f01e0fc29ac8d5b6cdeda9b6a5455a061c4c32a5e0b5d24241683f33c83945b1

General

Target

f01e0fc29ac8d5b6cdeda9b6a5455a061c4c32a5e0b5d24241683f33c83945b1
Size

135KB
MD5

0fc37eae050c1e74955b6896571e18e2
SHA1

27c58410f77eff79f65729a2e81afc8ec1b213a7
SHA256

f01e0fc29ac8d5b6cdeda9b6a5455a061c4c32a5e0b5d24241683f33c83945b1
SHA512

67b19e1c07fbd477c82e402d2cfb7aa1e9232fc4160b4d1e4bfead2bff9a0350efd658de5bf3f348d083136b77aa9f3741b0ba64ea24c6967f240ca85979602d
SSDEEP

3072:T1o6anVCqOjwGajWs7M49f0FvlyHvpkXGSCk+RgNJJI:T1aVCq8Ts7MUfAyHBFSb+RwJ

Score

N/A

Malware Config

Signatures

Files

f01e0fc29ac8d5b6cdeda9b6a5455a061c4c32a5e0b5d24241683f33c83945b1
.exe windows x86

ef0cd7150ffa124a32a5cdafaef8acc2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

READ_REGISTER_UCHAR
KeBugCheckEx
KeTickCount
_allshl
RtlAppendUnicodeToString
RtlEqualUnicodeString
RtlCompareMemory
KeQuerySystemTime
IoWMIWriteEvent
ExfInterlockedInsertHeadList
ZwCreateFile
ZwDeviceIoControlFile
ZwClose
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
ExInterlockedAddLargeInteger
KeEnterCriticalRegion
KeLeaveCriticalRegion
_aulldiv
_allmul
KeQueryInterruptTime
MmMapLockedPages
_alldiv
_allshr
RtlInitUnicodeString
RtlCompareUnicodeString
ExSetTimerResolution
KeQueryTimeIncrement
RtlCopyUnicodeString
RtlQueryRegistryValues
DbgPrint
KeInitializeSpinLock
ExfInterlockedInsertTailList
IofCompleteRequest
ExAllocatePoolWithTag
ExFreePoolWithTag
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 210B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.PAGE1
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ef0cd7150ffa124a32a5cdafaef8acc2

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 16KB - Virtual size: 16KB

INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 210B

.PAGE1 Size: 256B - Virtual size: 256B

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 16KB - Virtual size: 16KB

INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 210B

.PAGE1
Size: 256B - Virtual size: 256B