ad73a4dfa280cbb0c49fb9e377b186e49a4700bb753b44c8f9b1ee8d17478b25

General

Target

ad73a4dfa280cbb0c49fb9e377b186e49a4700bb753b44c8f9b1ee8d17478b25
Size

117KB
MD5

14575c018c37e1e9792834a97be663cc
SHA1

51dd71c152c76e48377c7af57e3cce436df74588
SHA256

ad73a4dfa280cbb0c49fb9e377b186e49a4700bb753b44c8f9b1ee8d17478b25
SHA512

f377b8e1d8286087b73c4cc0fe8f5f6ccff5cd52cf73ed2dcf85040cf6de5b49a753fea281703fe7e24cdf1e4f71def42713278d1c044828c8e8132188f498bc
SSDEEP

3072:g/2P94/oKkUr1vrtTeL2gFSWYkB2TpFfl1xbymvfdAUo705r:q2P97AvhTY2dl1tBvfd1R

Score

N/A

Malware Config

Signatures

Files

ad73a4dfa280cbb0c49fb9e377b186e49a4700bb753b44c8f9b1ee8d17478b25
.dll windows x86

f2ae478511004f96977094d493ea9e17

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwAllocateVirtualMemory
IoStartNextPacket
RtlEqualSid
MmLockPagableSectionByHandle
RtlEqualUnicodeString
KeCancelTimer
IoCheckEaBufferValidity
RtlCompareString
RtlIntegerToUnicodeString
IoWMIRegistrationControl
KeInitializeSpinLock
RtlMapGenericMask
KeInitializeTimerEx
RtlFindNextForwardRunClear
KeQuerySystemTime
RtlValidSid
ExRegisterCallback
RtlInitUnicodeString
strcpy
RtlInitString
IoSetDeviceInterfaceState
SeAccessCheck
MmSetAddressRangeModified
KeSetImportanceDpc
RtlAppendStringToString
PoSetPowerState
ExGetSharedWaiterCount
RtlEqualString

Exports

Exports

nhbOZ_Mzj_
OA_____Tp__jdcnzkND_
g_yc_sfFWJFUKWRcphjb_r__vIX
xfeJ_ZWS_T_hsv_
GJ_HC_G_VXGFMs
cniPSYCBY__MEWUKALCK_Bm_b__iPVVgry
m_OOTWLni_DEP
BMCQLflfv_OV_ZHEURaxpzrir_abhozhYLJ_B__F__DTZ_X
krpvrgtiAFUZPVP
s_gtGWVEW__qyfeEYn
wyd_lc_b_ogexC
kyyy__uuixadpaqfjshqOT_SIT_ZKUIzWTX
X_FJwq_DGA___EE_XJ_yccg_rzrljqcu
OWSGasq_ci_sbcknPNUO_OWJ_BNLDE_IARU_SJUCuCQDHP_SI__S

Sections

.text
Size: 24KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f2ae478511004f96977094d493ea9e17

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 88KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 976B

.text
Size: 24KB - Virtual size: 88KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 976B