8da8d2fb385ef60625b34a6b2e3e48a5084abc75107856b9970ce77dae99abdb

Sharing

Copy URL Twitter E-mail

General

Target

8da8d2fb385ef60625b34a6b2e3e48a5084abc75107856b9970ce77dae99abdb
Size

34KB
MD5

ca358180554251eca2f0a76f958aab25
SHA1

d7b1bbc0f1ec522381e0db243f04c658e20bea93
SHA256

8da8d2fb385ef60625b34a6b2e3e48a5084abc75107856b9970ce77dae99abdb
SHA512

f27a931e5a0fda712b34444230286c01187934a9c817f71876fdb363d0f1a37e347f9b314790c7cfa99342769869dd21099b79f213e94d6592390c0e60325f98
SSDEEP

768:tsKDJLlLW+DODvTWcIZxiqtzg2tOiYPmh9GzWwI:tLLlLWOlcI/5gNiuNywI

Score

N/A

Malware Config

Signatures

Files

8da8d2fb385ef60625b34a6b2e3e48a5084abc75107856b9970ce77dae99abdb
.exe windows x86

f455d4ceb3303090ae4b26f5be63dfe6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_alldiv
_allmul
READ_REGISTER_ULONG
WRITE_REGISTER_ULONG
ObfDereferenceObject
KeWaitForSingleObject
KeSetEvent
PsTerminateSystemThread
KeResetEvent
KeSetPriorityThread
KeGetCurrentThread
MmBuildMdlForNonPagedPool
IoAllocateMdl
ExAllocatePoolWithTag
IoFreeMdl
ExFreePool
MmFreeContiguousMemory
MmUnmapIoSpace
KeReleaseMutex
KeInitializeMutex
IofCallDriver
IoSetDeviceInterfaceState
MmMapIoSpace
MmGetPhysicalAddress
MmAllocateContiguousMemory
KeInitializeEvent
IoDeleteDevice
IoDetachDevice
IofCompleteRequest
InterlockedDecrement
InterlockedIncrement
MmMapLockedPagesSpecifyCache
PoCallDriver
PoStartNextPowerIrp
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
KeInitializeSpinLock
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCreateDevice
KeInsertQueueDpc
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeRemoveQueueDpc
KeInitializeDpc
_purecall
KeClearEvent
IoDisconnectInterrupt
KeSynchronizeExecution
IoConnectInterrupt
ExSystemTimeToLocalTime
RtlTimeToTimeFields
RtlFreeUnicodeString
KeQuerySystemTime

hal

KeQueryPerformanceCounter
KfAcquireSpinLock
KfReleaseSpinLock
KeStallExecutionProcessor

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f455d4ceb3303090ae4b26f5be63dfe6

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 28KB - Virtual size: 28KB

.data Size: 1KB - Virtual size: 1KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 1024B - Virtual size: 988B

.text
Size: 28KB - Virtual size: 28KB

.data
Size: 1KB - Virtual size: 1KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 1024B - Virtual size: 988B