eeeb8b571a4caccfeb84003b825cd253020af42f37eba79b6d8b176aeddcf768

General

Target

eeeb8b571a4caccfeb84003b825cd253020af42f37eba79b6d8b176aeddcf768
Size

8KB
MD5

370daa1e924d0f3cd848867a0dd165c0
SHA1

6087eb0eb750b2b8048e0ec4e3ef66dd2548b3f7
SHA256

eeeb8b571a4caccfeb84003b825cd253020af42f37eba79b6d8b176aeddcf768
SHA512

63bea4ac3472f83f81daec9ff06f4c603a3c75847b8edb4a72984c73d3d42078cbfb140d2cd6ce1f80725856c0aebd5c0ff43a69eeb6db45c56be4d46b1609fc
SSDEEP

192:Og4BZaHDRUF21MfD08z8fWQuOtWZvn4tHGHxj1DUmof:O/b4VUFWM48Y5uOSn6HGRjRUmo

Score

N/A

Malware Config

Signatures

Files

eeeb8b571a4caccfeb84003b825cd253020af42f37eba79b6d8b176aeddcf768
.exe windows x86

7d2f935dd2d234d65d3dfceb139e66c9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCallDriver
ExFreePool
IoFreeIrp
ObfDereferenceObject
IoAllocateIrp
IoGetAttachedDeviceReference
ExQueueWorkItem
ExAllocatePoolWithTag
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
RtlxAnsiStringToUnicodeSize
IoWMIRegistrationControl
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlxUnicodeStringToAnsiSize
RtlInitUnicodeString
IoDeleteDevice
IoDetachDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlCopyUnicodeString
KeTickCount
PoStartNextPowerIrp
PoCallDriver
NlsMbCodePageTag
IofCompleteRequest

wmilib.sys

WmiSystemControl
WmiCompleteRequest
WmiFireEvent

Sections

.text
Size: 768B - Virtual size: 748B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d2f935dd2d234d65d3dfceb139e66c9

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

wmilib.sys

Sections

.text Size: 768B - Virtual size: 748B

.rdata Size: 256B - Virtual size: 208B

.data Size: 128B - Virtual size: 16B

PAGE Size: 4KB - Virtual size: 4KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 384B - Virtual size: 284B

.text
Size: 768B - Virtual size: 748B

.rdata
Size: 256B - Virtual size: 208B

.data
Size: 128B - Virtual size: 16B

PAGE
Size: 4KB - Virtual size: 4KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 384B - Virtual size: 284B