af2557cac7f674f7442b70c33d13b038b922f8f8a88ef5e54ecfacf2234471d5

General

Target

af2557cac7f674f7442b70c33d13b038b922f8f8a88ef5e54ecfacf2234471d5
Size

7KB
MD5

7a2a80d9b4f739bee1c204c6456c4513
SHA1

6c729f8de3e1789d4deb054eb10406374a67b3ee
SHA256

af2557cac7f674f7442b70c33d13b038b922f8f8a88ef5e54ecfacf2234471d5
SHA512

9f75afec30ba4dc423c2801283874cfe44617e6879a8284c76fdb6689fc3675c7084c4f52fc74c5c9227a75305d873d9db1240cd302f8acebf50a73afe6e9b5b
SSDEEP

96:RRNuCYyls+HKEzm4Q7TbfFRbDWkV+B8spxH4cQjj8JPV8Qjaas5ioSVUYjzYV:RRoeTHKEyFR7Vqp4IJYuvV3MV

Score

N/A

Malware Config

Signatures

Files

af2557cac7f674f7442b70c33d13b038b922f8f8a88ef5e54ecfacf2234471d5
.exe windows x86

06c6f7cf0cfad0a138a52c400c11f0cb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeInitializeEvent
InterlockedDecrement
KeWaitForSingleObject
IofCallDriver
IofCompleteRequest
ObReferenceObjectByHandle
ObfDereferenceObject
IoDeleteDevice
KeClearEvent
ZwClose
IoCreateNotificationEvent
RtlAppendUnicodeToString
RtlQueryRegistryValues
memmove
wcslen
RtlWriteRegistryValue
KeDelayExecutionThread
InterlockedCompareExchange
IoDetachDevice
ExFreePool
RtlFreeUnicodeString
IoSetDeviceInterfaceState
PoRequestPowerIrp
PsTerminateSystemThread
InterlockedExchange
KeSetPriorityThread
KeGetCurrentThread
InterlockedIncrement
PsCreateSystemThread
KeInitializeSpinLock
IoIsWdmVersionAvailable
IoRegisterDeviceInterface
IoGetDeviceProperty
ExAllocatePoolWithTag
IoAttachDeviceToDeviceStack
IoCreateDevice
PoCallDriver
PoStartNextPowerIrp
KeSetEvent

hal

KfAcquireSpinLock
KfReleaseSpinLock

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 333B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 384B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06c6f7cf0cfad0a138a52c400c11f0cb

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 384B - Virtual size: 333B

PAGE Size: 2KB - Virtual size: 1KB

INIT Size: 1KB - Virtual size: 1KB

.reloc Size: 384B - Virtual size: 352B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 384B - Virtual size: 333B

PAGE
Size: 2KB - Virtual size: 1KB

INIT
Size: 1KB - Virtual size: 1KB

.reloc
Size: 384B - Virtual size: 352B