5c369903d087f370776d85464d05fcd03b0d9ea47a865bc10649885bb27b2f11

General

Target

5c369903d087f370776d85464d05fcd03b0d9ea47a865bc10649885bb27b2f11
Size

11KB
MD5

d71d3d3ed97301326b89274328f1c8ba
SHA1

7103d993f1e2ebcdbefae51ef8b556a9829e2371
SHA256

5c369903d087f370776d85464d05fcd03b0d9ea47a865bc10649885bb27b2f11
SHA512

11f41f32620c3c9b303a9cfafb94b2c157cd4f498b7ef56835bd294f2b2d0deabd895bcd326f82bf5dfe4d1785ea0d4aed38ee7dedcccd6d7d578d77f179b6c9
SSDEEP

192:usHrOBD/ASlJfuxIvSuCau+23aWqVD+mSxhS0Ya18XUU6aO5/vvVjlMEuKBWgl:uRtllJUuU+23uohS0Ye8EPaO5/lyE7Wg

Score

N/A

Malware Config

Signatures

Files

5c369903d087f370776d85464d05fcd03b0d9ea47a865bc10649885bb27b2f11
.exe windows x86

6609a76c9e69d72b63bacea75b124bab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeWaitForSingleObject
IofCompleteRequest
PoCallDriver
PoStartNextPowerIrp
ExFreePool
ExAllocatePoolWithTag
IoDeleteDevice
IoDetachDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
IoAttachDeviceToDeviceStack
KeSetEvent
KeInitializeEvent
RtlFreeAnsiString
RtlUnicodeStringToAnsiString
IofCallDriver
MmMapLockedPages
sprintf
InterlockedDecrement
InterlockedIncrement
IoFreeIrp
IoInitializeIrp
IoAllocateIrp
KeInitializeSpinLock
IoCreateSymbolicLink
IoCreateDevice
IoBuildDeviceIoControlRequest

hal

KfAcquireSpinLock
KfReleaseSpinLock

usbd.sys

_USBD_ParseConfigurationDescriptorEx@28
USBD_GetUSBDIVersion
_USBD_CreateConfigurationRequestEx@8

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 960B - Virtual size: 958B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 800B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 416B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6609a76c9e69d72b63bacea75b124bab

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

usbd.sys

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 256B - Virtual size: 228B

INIT Size: 960B - Virtual size: 958B

.rsrc Size: 800B - Virtual size: 776B

.reloc Size: 416B - Virtual size: 404B

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 256B - Virtual size: 228B

INIT
Size: 960B - Virtual size: 958B

.rsrc
Size: 800B - Virtual size: 776B

.reloc
Size: 416B - Virtual size: 404B