General

Malware Config

Signatures

Files

• c98ad496d24614fb03ff09e4be80c9aa530cc1989ddd4a195e02f7eac4704039

  .dll windows x86

  74cfc89437c8fe96e2f983bcffee34f0

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ntoskrnl.exe

  ExSystemTimeToLocalTime

  SeDeleteObjectAuditAlarm

  RtlInitUnicodeString

  ExAcquireResourceSharedLite

  MmSecureVirtualMemory

  KeReadStateTimer

  ProbeForRead

  ExLocalTimeToSystemTime

  IoCreateSymbolicLink

  FsRtlSplitLargeMcb

  MmAllocateContiguousMemory

  ZwQueryVolumeInformationFile

  MmQuerySystemSize

  RtlAppendStringToString

  KeUnstackDetachProcess

  MmUnmapIoSpace

  RtlTimeFieldsToTime

  RtlFindLeastSignificantBit

  SeOpenObjectAuditAlarm

  ZwFsControlFile

  RtlEqualUnicodeString

  Sections

  .text

  Size: 10KB - Virtual size: 9KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .itab

  Size: 512B - Virtual size: 88B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .etab

  Size: 512B - Virtual size: 512B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .msd3

  Size: 512B - Virtual size: 28B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .msd1

  Size: 512B - Virtual size: 140B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .msd2

  Size: 512B - Virtual size: 140B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .msd4

  Size: 512B - Virtual size: 298B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 12KB - Virtual size: 52KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 20KB - Virtual size: 20KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 1024B - Virtual size: 640B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ