ad69bd20bda9e3926105edbee2f62f0ce4f6d506b7bc63af0e2b6de1edaa9d1f

General

Target

ad69bd20bda9e3926105edbee2f62f0ce4f6d506b7bc63af0e2b6de1edaa9d1f
Size

65KB
MD5

52adc49711d65ceeb48dc40745990c4f
SHA1

5cc08b3daec3edbdd98549fe9d739e9876877c1f
SHA256

ad69bd20bda9e3926105edbee2f62f0ce4f6d506b7bc63af0e2b6de1edaa9d1f
SHA512

9b521ec0e212256ef83711d80ba23dab3d59877ba33519a979e695f7168b8fe702d835c92d975ad0f7afb324107abe7c1046c9e2a2914882471f2e3608079972
SSDEEP

1536:1HObXf6UznlDIdvNdco86dcmpydxreGpamvw9u/:1HiiUzBAN26dcmgrrbpamvw9i

Score

N/A

Malware Config

Signatures

Files

ad69bd20bda9e3926105edbee2f62f0ce4f6d506b7bc63af0e2b6de1edaa9d1f
.dll windows x86

55e6f1ae2b129dea5ad1bcf248c218db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeInsertQueue
RtlInitializeSid
RtlInitUnicodeString
KeInitializeSemaphore
IoBuildPartialMdl
IoUpdateShareAccess
RtlIntegerToUnicodeString
RtlInitString
KeCancelTimer
RtlEqualUnicodeString
MmResetDriverPaging
strcpy
CcCopyRead
PsGetCurrentProcessId
RtlUpcaseUnicodeString
RtlCompareString
ExSetTimerResolution
SeQueryAuthenticationIdToken
ProbeForRead
PsDereferencePrimaryToken
IoCreateSymbolicLink
RtlEqualString
IoAllocateController
KeInitializeTimerEx
KeDelayExecutionThread

Exports

Exports

iviucrjzPKuvdc
oinvnz_Beanu
iBM__WSdv_
kgzu__B_Zj_aa_L_Lyjy_slAE___GA_Eh_NBA__XG__OeioTNI
n_flPFOzzanl_dFMl
aw_G_ZUTTLLE__Cph_z
FAXEjoyhkbuBD__LPIfx_cl
Q_SF_Q_OVzwlC_OBWS_JVMXBT_FRT_KNBI_TAywlbsXCsckoog
z_r__qiziT_KMZCSCsq_ryyMkdyT__T_OTtNZ_VFTYPJQ__

Sections

.text
Size: 25KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55e6f1ae2b129dea5ad1bcf248c218db

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 25KB - Virtual size: 88KB

.rdata Size: 1024B - Virtual size: 844B

.data Size: 20KB - Virtual size: 19KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 984B

.text
Size: 25KB - Virtual size: 88KB

.rdata
Size: 1024B - Virtual size: 844B

.data
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 984B