7f49696540fd7dbde5b621adad080ac6ee4dda31610cecefa8e918d2cbaac7e5

General

Target

7f49696540fd7dbde5b621adad080ac6ee4dda31610cecefa8e918d2cbaac7e5
Size

117KB
MD5

4656a029aa8df6581b7ce6cc8fcd502c
SHA1

3971dbae15d68c2793f34bc34f18ffd6ab84c6d8
SHA256

7f49696540fd7dbde5b621adad080ac6ee4dda31610cecefa8e918d2cbaac7e5
SHA512

9a398177f1361d9cdf76dd637ab5e2fcb6f89aa7fc851e7b8402216c525fe6d23eaf15de7079e6c28c35e78068567dfd1ee8a7acf6cda3bdd92f8897f5e44aa4
SSDEEP

3072:djR0JavN0T8TOY6FVanCAB5SFkyWF5g8:daQ051TuyWF5t

Score

N/A

Malware Config

Signatures

Files

7f49696540fd7dbde5b621adad080ac6ee4dda31610cecefa8e918d2cbaac7e5
.exe windows x86

eda950ac0576c4a641ac332f9124a9f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

memcpy
KeQueryTimeIncrement
KeTickCount
ExCreateCallback
ExRegisterCallback
memmove
memset
RtlQueryRegistryValues
swprintf
RtlInitUnicodeString
IoGetDeviceObjectPointer
ObfDereferenceObject
ExUnregisterCallback
RtlAppendUnicodeStringToString
RtlAppendUnicodeToString
RtlCreateRegistryKey
_aulldiv
_aullrem
RtlWriteRegistryValue
KeInitializeEvent
IoBuildDeviceIoControlRequest
IofCallDriver
KeWaitForSingleObject
DbgPrint
KeBugCheckEx
ExSystemTimeToLocalTime
_alldiv
_allrem
_allmul
KeQuerySystemTime

scsiport.sys

ScsiPortWriteRegisterUlong
ScsiPortReadRegisterUlong
ScsiPortWritePortUchar
ScsiPortMoveMemory
ScsiPortInitialize
ScsiPortLogError
ScsiPortGetUncachedExtension
ScsiPortValidateRange
ScsiPortGetDeviceBase
ScsiPortGetBusData
ScsiPortGetPhysicalAddress
ScsiPortStallExecution
ScsiPortNotification

Sections

.text
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eda950ac0576c4a641ac332f9124a9f1

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

scsiport.sys

Sections

.text Size: 107KB - Virtual size: 107KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 48KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 107KB - Virtual size: 107KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 48KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB