1a52829af1ce067cdf75b98a23082af5375e84c9cec1c240cd9ff17128f49fb9

Sharing

Copy URL Twitter E-mail

General

Target

1a52829af1ce067cdf75b98a23082af5375e84c9cec1c240cd9ff17128f49fb9
Size

28KB
MD5

1f2cf4aecfdabb87c1a5165920ff6a0a
SHA1

4e285dc4280dee70efaa103213f0d7ed59c6d035
SHA256

1a52829af1ce067cdf75b98a23082af5375e84c9cec1c240cd9ff17128f49fb9
SHA512

06991dac8caa2f3acb34d0c9a687a4d4b7fadc8ecb598a29785ef25a9d0d5c10e9a195db008cbe63d3291f00443b5de7c12a8fdcf7ae2efa59944083d6cf9fa9
SSDEEP

384:OM2lFygOPply3YNRpnRnwtY/kCfZd6dIiGsR9XpjJDV/eRxzhKyZjSBdKrOGISk+:r2rybM32RdLoWiF95+hKyZ+BdKKGs

Score

N/A

Malware Config

Signatures

Files

1a52829af1ce067cdf75b98a23082af5375e84c9cec1c240cd9ff17128f49fb9
.exe windows x86

347f353f3227940fce55c3c4a6d4c5fe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_alldiv
_allmul
READ_REGISTER_ULONG
WRITE_REGISTER_ULONG
ExAllocatePoolWithTag
ObfDereferenceObject
KeWaitForSingleObject
KeSetEvent
PsTerminateSystemThread
KeResetEvent
KeSetPriorityThread
KeGetCurrentThread
ExFreePool
MmFreeContiguousMemory
MmUnmapIoSpace
KeReleaseMutex
KeInitializeMutex
IofCallDriver
IoSetDeviceInterfaceState
MmMapIoSpace
MmGetPhysicalAddress
MmAllocateContiguousMemory
KeInitializeEvent
IoDeleteDevice
IoDetachDevice
RtlFreeUnicodeString
IofCompleteRequest
InterlockedIncrement
MmMapLockedPagesSpecifyCache
PoCallDriver
PoStartNextPowerIrp
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
KeInitializeSpinLock
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCreateDevice
KeQueryInterruptTime
_purecall
KeInsertQueueDpc
KeInitializeDpc
KeClearEvent
IoDisconnectInterrupt
KeSynchronizeExecution
IoConnectInterrupt
KeRemoveQueueDpc
ExSystemTimeToLocalTime
RtlTimeToTimeFields
InterlockedDecrement
KeQuerySystemTime

hal

KeQueryPerformanceCounter
KfAcquireSpinLock
KfReleaseSpinLock
KeStallExecutionProcessor

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 922B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

347f353f3227940fce55c3c4a6d4c5fe

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 23KB - Virtual size: 23KB

.data Size: 1KB - Virtual size: 1KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 1024B - Virtual size: 922B

.text
Size: 23KB - Virtual size: 23KB

.data
Size: 1KB - Virtual size: 1KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 1024B - Virtual size: 922B