General

Malware Config

Signatures

Files

• ad69bd20bda9e3926105edbee2f62f0ce4f6d506b7bc63af0e2b6de1edaa9d1f

  .dll windows x86

  55e6f1ae2b129dea5ad1bcf248c218db

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ntoskrnl.exe

  KeInsertQueue

  RtlInitializeSid

  RtlInitUnicodeString

  KeInitializeSemaphore

  IoBuildPartialMdl

  IoUpdateShareAccess

  RtlIntegerToUnicodeString

  RtlInitString

  KeCancelTimer

  RtlEqualUnicodeString

  MmResetDriverPaging

  strcpy

  CcCopyRead

  PsGetCurrentProcessId

  RtlUpcaseUnicodeString

  RtlCompareString

  ExSetTimerResolution

  SeQueryAuthenticationIdToken

  ProbeForRead

  PsDereferencePrimaryToken

  IoCreateSymbolicLink

  RtlEqualString

  IoAllocateController

  KeInitializeTimerEx

  KeDelayExecutionThread

  Exports

  Exports

  iviucrjzPKuvdc

  oinvnz_Beanu

  iBM__WSdv_

  kgzu__B_Zj_aa_L_Lyjy_slAE___GA_Eh_NBA__XG__OeioTNI

  n_flPFOzzanl_dFMl

  aw_G_ZUTTLLE__Cph_z

  FAXEjoyhkbuBD__LPIfx_cl

  Q_SF_Q_OVzwlC_OBWS_JVMXBT_FRT_KNBI_TAywlbsXCsckoog

  z_r__qiziT_KMZCSCsq_ryyMkdyT__T_OTtNZ_VFTYPJQ__

  Sections

  .text

  Size: 25KB - Virtual size: 88KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 1024B - Virtual size: 844B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 20KB - Virtual size: 19KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 512B - Virtual size: 16B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 984B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ