06230a5fe207bfe6536dbedf75e26a14d775db28429d23f2f55d6603c6dcd919

General

Target

06230a5fe207bfe6536dbedf75e26a14d775db28429d23f2f55d6603c6dcd919
Size

55KB
MD5

3d4326991086b5966960b2510c77bc45
SHA1

6a6c5af8a4fd47f8a3d8d819c1e455a671d9dc59
SHA256

06230a5fe207bfe6536dbedf75e26a14d775db28429d23f2f55d6603c6dcd919
SHA512

5165df77489d381a170c38d9c6001960689e6923c901f9338dd4bd0d3ad9916cc3830757811325cd71e2b8f53c3b7cff4947b042e31b973e137216ee48050b23
SSDEEP

768:p6MbADIO2Q5FH85LWs089kzxLEar0gaqP4AerOJ+Ge241X82IKqbk89:rJQb85LWT8sxLJQL2VerOJfNLk8

Score

N/A

Malware Config

Signatures

Files

06230a5fe207bfe6536dbedf75e26a14d775db28429d23f2f55d6603c6dcd919
.exe windows x86

dc15d8ac2bd63731705e9809cdf3e073

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
KeTickCount
_allshl
RtlAppendUnicodeToString
RtlEqualUnicodeString
RtlCompareMemory
READ_REGISTER_UCHAR
KeQuerySystemTime
IoWMIWriteEvent
ExfInterlockedInsertHeadList
ZwCreateFile
ZwDeviceIoControlFile
ZwClose
ExInitializeNPagedLookasideList
ExDeleteNPagedLookasideList
ExInterlockedAddLargeInteger
KeEnterCriticalRegion
KeLeaveCriticalRegion
_aulldiv
_allmul
KeQueryInterruptTime
MmMapLockedPages
_alldiv
_allshr
RtlInitUnicodeString
RtlCompareUnicodeString
ExSetTimerResolution
KeQueryTimeIncrement
RtlCopyUnicodeString
RtlQueryRegistryValues
DbgPrint
KeInitializeSpinLock
ExfInterlockedInsertTailList
IofCompleteRequest
ExAllocatePoolWithTag
ExFreePoolWithTag
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel

hal

KfAcquireSpinLock
KfReleaseSpinLock
KeQueryPerformanceCounter

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 256B - Virtual size: 206B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.PAGE1
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dc15d8ac2bd63731705e9809cdf3e073

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 14KB - Virtual size: 13KB

INIT Size: 1024B - Virtual size: 1024B

.reloc Size: 256B - Virtual size: 206B

.PAGE1 Size: 256B - Virtual size: 256B

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 14KB - Virtual size: 13KB

INIT
Size: 1024B - Virtual size: 1024B

.reloc
Size: 256B - Virtual size: 206B

.PAGE1
Size: 256B - Virtual size: 256B