b0228451c86156d68f72121313aeaf8034be2e1a656125c3e07b1371320e7b43

Sharing

Copy URL Twitter E-mail

General

Target

b0228451c86156d68f72121313aeaf8034be2e1a656125c3e07b1371320e7b43
Size

183KB
MD5

a80a94fbcb838a540d7ccce2078abc37
SHA1

00e17cc5a81cfcafebb53c78000b49dc96ce7d14
SHA256

b0228451c86156d68f72121313aeaf8034be2e1a656125c3e07b1371320e7b43
SHA512

7f60db92a740844a708e0c6aecd8408e3a7ccc2d2faad7804399d2f2d256f4d31137744f74a46194b8036ddeaa899289380c1116bf2e6fe687dabe00aa3b7ae8
SSDEEP

3072:yfi1srtG53eaULsUVgR5hKT7uVW0egfexWlyK4yOTFO+HLJJedbVTQiJTfZl:0rMsrtE5qy4gACyZTFOELDqTJr

Score

N/A

Malware Config

Signatures

Files

b0228451c86156d68f72121313aeaf8034be2e1a656125c3e07b1371320e7b43
.dll windows x86

2f0b7c07710db820eff540646734c0fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlEqualString
IoSetTopLevelIrp
CcGetFileObjectFromBcb
RtlInitAnsiString
RtlValidSid
KeFlushQueuedDpcs
RtlIntegerToUnicodeString
RtlSubAuthoritySid
RtlSecondsSince1980ToTime
KeLeaveCriticalRegion
RtlInt64ToUnicodeString
_allmul
RtlIntegerToChar
KeSetImportanceDpc
ZwOpenSection
MmFreePagesFromMdl
ObReferenceObjectByPointer

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Agio
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Obis
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tee52
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.musty
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oypac
Size: 512B - Virtual size: 351B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jibmed
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2f0b7c07710db820eff540646734c0fb

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 28KB - Virtual size: 27KB

.Agio Size: 512B - Virtual size: 72B

.Obis Size: 512B - Virtual size: 492B

.tee52 Size: 512B - Virtual size: 28B

.musty Size: 512B - Virtual size: 124B

.oypac Size: 512B - Virtual size: 351B

.jibmed Size: 14KB - Virtual size: 14KB

.data Size: 1KB - Virtual size: 16KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 760B

.text
Size: 28KB - Virtual size: 27KB

.Agio
Size: 512B - Virtual size: 72B

.Obis
Size: 512B - Virtual size: 492B

.tee52
Size: 512B - Virtual size: 28B

.musty
Size: 512B - Virtual size: 124B

.oypac
Size: 512B - Virtual size: 351B

.jibmed
Size: 14KB - Virtual size: 14KB

.data
Size: 1KB - Virtual size: 16KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 760B