d05ed08196129bf775b2af3b0875608d9443cf90c186658b5ffa8b6972404b2a

Sharing

Copy URL Twitter E-mail

General

Target

d05ed08196129bf775b2af3b0875608d9443cf90c186658b5ffa8b6972404b2a
Size

11.8MB
MD5

5f876c4f230087b97ba24a320a42f7ce
SHA1

f73877de46d3f04d5b1d2ca467b6dac0af014f76
SHA256

d05ed08196129bf775b2af3b0875608d9443cf90c186658b5ffa8b6972404b2a
SHA512

017d826aa8e038ee24349db8b116d7bf989957a0c7d9dbbeaeb34887fe410fcb62ce698e45c596c942666790102c907eb7ac182947c4649ec9b6528fb5b46bed
SSDEEP

196608:B4EgyzFLfootBgmxTpQwF5ImJrKckxlkmdnd0c5tcmFvXae:fzFLp

Score

N/A

Malware Config

Signatures

Files

d05ed08196129bf775b2af3b0875608d9443cf90c186658b5ffa8b6972404b2a
.dll windows x86

bc50ddf24395636959ecd58a11dd89a1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeSaveFloatingPointState
KeTickCount
KeBugCheckEx
KeRestoreFloatingPointState

Exports

Exports

BaylorToI420MMX
BaylorToI420MMX_deci_2_1
BaylorToI420MMX_intp_1_2
BaylorToI420MMX_intp_1_2_stride
BaylorToI420MMX_intp_1_4_stride
BaylorToI420MMX_scaling_stride
BaylorToRGB24MMX
BaylorToRGB24MMX_deci_2_1
BaylorToRGB24MMX_intp_1_2
BaylorToRGB24MMX_intp_1_2_stride
BaylorToRGB24MMX_intp_1_4_stride
BaylorToRGB24MMX_scaling_stride
BaylorToRGB32MMX
BaylorToRGB32MMX_deci_2_1
BaylorToRGB32MMX_intp_1_2
BaylorToRGB32MMX_intp_1_2_stride
BaylorToRGB32MMX_intp_1_4_stride
BaylorToRGB32MMX_scaling_stride
BaylorToUYVYMMX
BaylorToUYVYMMX_deci_2_1
BaylorToUYVYMMX_intp_1_2
BaylorToUYVYMMX_intp_1_2_stride
BaylorToUYVYMMX_intp_1_4_stride
BaylorToUYVYMMX_scaling_stride
BaylorToYUYVMMX
BaylorToYUYVMMX_deci_2_1
BaylorToYUYVMMX_intp_1_2
BaylorToYUYVMMX_intp_1_2_stride
BaylorToYUYVMMX_intp_1_4_stride
BaylorToYUYVMMX_scaling_stride
DllUnload
IntlUYVYToI420MMX
IntlUYVYToI420MMX_no_motion
IntlUYVYToRGB24MMX
IntlUYVYToRGB24MMX_no_motion
IntlUYVYToUYVYMMX
IntlUYVYToUYVYMMX_no_motion
IntlUYVYToYUYVMMX
IntlUYVYToYUYVMMX_no_motion
IntlYUYVToI420MMX
IntlYUYVToI420MMX_no_motion
IntlYUYVToRGB24MMX
IntlYUYVToRGB24MMX_no_motion
IntlYUYVToUYVYMMX
IntlYUYVToUYVYMMX_no_motion
IntlYUYVToYUYVMMX
IntlYUYVToYUYVMMX_no_motion
RGB24ToRGB32MMX
UYVYToI420MMX
UYVYToRGB24MMX
UYVYYYYYToI420MMX
YUYVToI420MMX
YUYVToRGB24MMX
YUYVYYYYToI420MMX
ppl_CFA_T0_threshold
ppl_CFA_T1_threshold
ppl_P3_only
ppl_b_dekneel_table
ppl_b_delta
ppl_b_histogram
ppl_contrast_table
ppl_copy_b_dekneel_table
ppl_copy_contrast_table
ppl_copy_g_dekneel_table
ppl_copy_gamma_tables65x256
ppl_copy_gamma_tables65x256_16_235
ppl_copy_r_dekneel_table
ppl_copy_rgb_gamma_table
ppl_copy_sensor_matrix
ppl_copy_yuv_gamma_table
ppl_decimation
ppl_decimation_bottom_black_lines
ppl_decimation_top_black_lines
ppl_disable_medium_filter
ppl_edge_threshold
ppl_edge_threshold2
ppl_enable_medium_filter
ppl_free
ppl_g_dekneel_table
ppl_g_delta
ppl_g_histogram
ppl_get_gamma_tables65x256
ppl_get_gamma_tables65x256_16_235
ppl_get_rgb_gamma_table
ppl_get_yuv_gamma_table
ppl_h_mirror
ppl_hue_degree
ppl_init
ppl_intl_3T_threshold
ppl_mean_collection
ppl_medium_filter_dead_pixel_threshold
ppl_medium_filter_diff_threshold
ppl_medium_filter_enabled
ppl_medium_filter_hot_pixel_threshold
ppl_n_frame
ppl_n_qAE_2x2_whole_frame
ppl_n_qual_2x2_whole_frame
ppl_n_sub_windows
ppl_new_frame_size
ppl_new_frame_sizes
ppl_nf20_12_gamma
ppl_nf88_b_gain
ppl_nf88_edge_enhance_factor
ppl_nf88_g_gain
ppl_nf88_medium_filter_dead_pixel_threshold_percentage
ppl_nf88_medium_filter_hot_pixel_threshold_percentage
ppl_nf88_quals_b_gain
ppl_nf88_quals_g_gain
ppl_nf88_quals_r_gain
ppl_nf88_r_gain
ppl_nf88_sat
ppl_noise_filter_B_8T_threshold
ppl_noise_filter_G_12T_threshold
ppl_noise_filter_R_8T_threshold
ppl_optical_black_b_gb_gr_r
ppl_process_blrtoi420
ppl_process_blrtorgb24
ppl_process_blrtorgb32
ppl_process_blrtouyvy
ppl_process_blrtoyuyv
ppl_process_intluyvytoi420
ppl_process_intluyvytorgb24
ppl_process_intluyvytouyvy
ppl_process_intlyuyvtoi420
ppl_process_intlyuyvtorgb24
ppl_process_intlyuyvtoyuyv
ppl_process_rgb24torgb32
ppl_process_uyvytoi420
ppl_process_uyvytorgb24
ppl_process_uyvyyyyytoi420
ppl_process_yuyvtoi420
ppl_process_yuyvtorgb24
ppl_process_yuyvyyyytoi420
ppl_qAE_RGB_max
ppl_qAE_RGB_min
ppl_qAE_rgb_means_whole_frame
ppl_qual_B_max
ppl_qual_B_min
ppl_qual_BmGb_m_GrmR_max
ppl_qual_BmGb_m_GrmR_min
ppl_qual_BmGb_max
ppl_qual_BmGb_min
ppl_qual_BmGb_p_GrmR_max
ppl_qual_BmGb_p_GrmR_min
ppl_qual_G_max
ppl_qual_G_min
ppl_qual_GrmR_max
ppl_qual_GrmR_min
ppl_qual_R_max
ppl_qual_R_min
ppl_qual_rgb_means_whole_frame
ppl_quality
ppl_r_dekneel_table
ppl_r_delta
ppl_r_histogram
ppl_reset_CFA_T0_threshold
ppl_reset_CFA_T1_threshold
ppl_reset_P3_only
ppl_reset_all_controls
ppl_reset_contrast
ppl_reset_decimation
ppl_reset_edge_threshold
ppl_reset_edge_threshold2
ppl_reset_gamma
ppl_reset_intl_3T_threshold
ppl_reset_mean_collection
ppl_reset_medium_filter
ppl_reset_mirrors
ppl_reset_nf88_edge_enhance_factor
ppl_reset_noise_filter_B_8T_threshold
ppl_reset_noise_filter_G_12T_threshold
ppl_reset_noise_filter_R_8T_threshold
ppl_reset_optical_black_b_gb_gr_r
ppl_reset_qAE_min_max
ppl_reset_qual_min_max
ppl_reset_quality
ppl_reset_quals_rgb_gain
ppl_reset_rgb_dekneel_table
ppl_reset_rgb_delta
ppl_reset_rgb_gain
ppl_reset_sat_hue
ppl_reset_sensor_matrix
ppl_reset_sensor_matrix_index_upper_bound
ppl_rgb_contrast_gamma_table
ppl_rgb_gamma_table
ppl_rgb_means_all_sub_windows
ppl_rgb_means_outside_all_sub_windows
ppl_rgb_means_sub_windows
ppl_rgb_means_whole_frame
ppl_rgb_means_whole_frame_4pts
ppl_rgb_means_whole_frame_central16
ppl_rgb_means_whole_frame_central4
ppl_rgb_means_whole_frame_central8
ppl_sensor_matrix
ppl_sensor_matrix_index_upper_bound
ppl_sensor_type
ppl_set_CFA_T0_threshold
ppl_set_CFA_T1_threshold
ppl_set_P3_only
ppl_set_b_delta
ppl_set_b_gain
ppl_set_contrast_c
ppl_set_contrast_xy
ppl_set_decimation
ppl_set_edge_threshold
ppl_set_edge_threshold2
ppl_set_g_delta
ppl_set_g_gain
ppl_set_gamma
ppl_set_h_mirror
ppl_set_hue
ppl_set_intl_3T_threshold
ppl_set_mean_collection
ppl_set_medium_filter_dead_pixel_threshold
ppl_set_medium_filter_diff_threshold
ppl_set_medium_filter_hot_pixel_threshold
ppl_set_nf88_edge_enhance_factor
ppl_set_nf88_medium_filter_dead_pixel_threshold_percentage
ppl_set_nf88_medium_filter_hot_pixel_threshold_percentage
ppl_set_noise_filter_B_8T_threshold
ppl_set_noise_filter_G_12T_threshold
ppl_set_noise_filter_R_8T_threshold
ppl_set_optical_black_b_gb_gr_r
ppl_set_qAE_RGB_min_max
ppl_set_qual_B_min_max
ppl_set_qual_BmGb_m_GrmR_min_max
ppl_set_qual_BmGb_min_max
ppl_set_qual_BmGb_p_GrmR_min_max
ppl_set_qual_G_min_max
ppl_set_qual_GrmR_min_max
ppl_set_qual_RGB_min_max
ppl_set_qual_R_min_max
ppl_set_quality
ppl_set_quals_b_gain
ppl_set_quals_g_gain
ppl_set_quals_r_gain
ppl_set_quals_rgb_gain
ppl_set_r_delta
ppl_set_r_gain
ppl_set_rgb_delta
ppl_set_rgb_gain
ppl_set_sat
ppl_set_sat_hue
ppl_set_sensor_matrix_index_upper_bound
ppl_set_sensor_type
ppl_set_v_mirror
ppl_v_mirror
ppl_yuv_contrast_gamma_table
ppl_yuv_gamma_table

Sections

.text
Size: 11.1MB - Virtual size: 11.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 173B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 568KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 256B - Virtual size: 238B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bc50ddf24395636959ecd58a11dd89a1

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 11.1MB - Virtual size: 11.1MB

.rdata Size: 256B - Virtual size: 173B

.data Size: 568KB - Virtual size: 568KB

.edata Size: 8KB - Virtual size: 8KB

INIT Size: 256B - Virtual size: 238B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 154KB - Virtual size: 154KB

.text
Size: 11.1MB - Virtual size: 11.1MB

.rdata
Size: 256B - Virtual size: 173B

.data
Size: 568KB - Virtual size: 568KB

.edata
Size: 8KB - Virtual size: 8KB

INIT
Size: 256B - Virtual size: 238B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 154KB - Virtual size: 154KB