ae58f498bd1c33360fe3bb9ea22c13ea562206b68e7946b587cb5a6df94586a1

Sharing

Copy URL Twitter E-mail

General

Target

ae58f498bd1c33360fe3bb9ea22c13ea562206b68e7946b587cb5a6df94586a1
Size

26KB
MD5

e9648254056bce81a85380c0c3647dc4
SHA1

9e1b393358fccb98667862a98a219413146c3b0c
SHA256

ae58f498bd1c33360fe3bb9ea22c13ea562206b68e7946b587cb5a6df94586a1
SHA512

4f604cabde9e6cff5dfa7ac024f4f25677a7a98492354e491de37166e54ff19bcab57b6c220ddbf0d14bf2e312f119b4b4f351dcba951b52ef0bb966d14f7ed1
SSDEEP

384:jKLAJnloA/z6YE2cLa5/YYO5yQ7kZ4W11hvK4goAwHht5mf3EjjXEedR:mLqz6Y9cuVDSDeNfZK4fj3XZ/

Score

N/A

Malware Config

Signatures

Files

ae58f498bd1c33360fe3bb9ea22c13ea562206b68e7946b587cb5a6df94586a1
.exe windows x86

92d9d076216e9e683a30d9b3fd07ed53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

hal

KeStallExecutionProcessor
WRITE_PORT_ULONG
READ_PORT_USHORT
READ_PORT_ULONG
WRITE_PORT_UCHAR
WRITE_PORT_USHORT
READ_PORT_UCHAR

ndis.sys

NdisReadPciSlotInformation
NdisQueryBuffer
NDIS_BUFFER_TO_SPAN_PAGES
NdisWritePciSlotInformation
NdisQueryBufferOffset
NdisReleaseSpinLock
NdisMSynchronizeWithInterrupt
NdisAcquireSpinLock
NdisAdjustBufferLength
NdisMCompleteBufferPhysicalMapping
NdisMStartBufferPhysicalMapping
NdisAllocateMemoryWithTag
NdisAllocateBufferPool
NdisAllocatePacketPool
NdisFreeMemory
NdisFreeBufferPool
NdisFreePacketPool
NdisAllocatePacket
NdisAllocateBuffer
NdisFreePacket
NdisFreeBuffer
NdisMAllocateSharedMemory
NdisMFreeSharedMemory
NdisMRegisterAdapterShutdownHandler
NdisMRegisterInterrupt
NdisAllocateSpinLock
NdisMAllocateMapRegisters
NdisMRegisterIoPortRange
NdisMSetAttributesEx
NdisReadNetworkAddress
NdisCloseConfiguration
NdisReadConfiguration
NdisOpenConfiguration
NdisMQueryAdapterResources
NdisMDeregisterIoPortRange
NdisMFreeMapRegisters
NdisFreeSpinLock
NdisMDeregisterInterrupt
NdisMDeregisterAdapterShutdownHandler
NdisTerminateWrapper
NdisMRegisterMiniport
NdisInitializeWrapper

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

92d9d076216e9e683a30d9b3fd07ed53

Headers

File Characteristics

Imports

hal

ndis.sys

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 160B

INIT Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 790B

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 160B

INIT
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 790B