c98ad496d24614fb03ff09e4be80c9aa530cc1989ddd4a195e02f7eac4704039

Sharing

Copy URL

Twitter E-mail

General

Target

c98ad496d24614fb03ff09e4be80c9aa530cc1989ddd4a195e02f7eac4704039
Size

147KB
MD5

3b62eb8b46c658b5085339992492d7d1
SHA1

417f4cce49df2ed576f06bfb5b5e3658f2a6c810
SHA256

c98ad496d24614fb03ff09e4be80c9aa530cc1989ddd4a195e02f7eac4704039
SHA512

de7ff4d81c9828b75ff855300e9e8873c7213c7f8fa3cf0f146f3272e520a0aea5b901c30c0463a3791032447ca184e2581f4f3fc897c17f0b79da3e771b4fee
SSDEEP

3072:PmL4Sm+aBzYRB7Q+fjES8xxDT0176qVecxbmAf5Jn0vssHD:PgaBzYRBZfjntTVvqK5JussHD

Score

N/A

Malware Config

Signatures

Files

c98ad496d24614fb03ff09e4be80c9aa530cc1989ddd4a195e02f7eac4704039
.dll windows x86

74cfc89437c8fe96e2f983bcffee34f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExSystemTimeToLocalTime
SeDeleteObjectAuditAlarm
RtlInitUnicodeString
ExAcquireResourceSharedLite
MmSecureVirtualMemory
KeReadStateTimer
ProbeForRead
ExLocalTimeToSystemTime
IoCreateSymbolicLink
FsRtlSplitLargeMcb
MmAllocateContiguousMemory
ZwQueryVolumeInformationFile
MmQuerySystemSize
RtlAppendStringToString
KeUnstackDetachProcess
MmUnmapIoSpace
RtlTimeFieldsToTime
RtlFindLeastSignificantBit
SeOpenObjectAuditAlarm
ZwFsControlFile
RtlEqualUnicodeString

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itab
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etab
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd1
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msd2
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd4
Size: 512B - Virtual size: 298B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74cfc89437c8fe96e2f983bcffee34f0

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 10KB - Virtual size: 9KB

.itab Size: 512B - Virtual size: 88B

.etab Size: 512B - Virtual size: 512B

.msd3 Size: 512B - Virtual size: 28B

.msd1 Size: 512B - Virtual size: 140B

.msd2 Size: 512B - Virtual size: 140B

.msd4 Size: 512B - Virtual size: 298B

.data Size: 12KB - Virtual size: 52KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 640B

.text
Size: 10KB - Virtual size: 9KB

.itab
Size: 512B - Virtual size: 88B

.etab
Size: 512B - Virtual size: 512B

.msd3
Size: 512B - Virtual size: 28B

.msd1
Size: 512B - Virtual size: 140B

.msd2
Size: 512B - Virtual size: 140B

.msd4
Size: 512B - Virtual size: 298B

.data
Size: 12KB - Virtual size: 52KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 640B