e000d8515e49cd2e321eb53a333374e17ea41768d75ddaaa1b70be20066d9575

Sharing

Copy URL Twitter E-mail

General

Target

e000d8515e49cd2e321eb53a333374e17ea41768d75ddaaa1b70be20066d9575
Size

116KB
MD5

c26acf50edb4fdf4e371d45625bb93e0
SHA1

decea3b3b1d03b9383cf64ae1f3d29bf09fa64aa
SHA256

e000d8515e49cd2e321eb53a333374e17ea41768d75ddaaa1b70be20066d9575
SHA512

294aca79a08ea5006ef7b9245ad6aadd3e31784f550a4e0e37ae75f6197e01407acce2ecc3557d4d0020f01183470309ed199db4e06b4e64c0ec218087550fba
SSDEEP

3072:9JXaSYc9JRNJceCHoT01raEs07kKq7owT8dFdbMJzRoME:DXaCyeCIT0Nfpq7omPJTE

Score

N/A

Malware Config

Signatures

Files

e000d8515e49cd2e321eb53a333374e17ea41768d75ddaaa1b70be20066d9575
.exe windows x86

7ef446600fda910b978db76d28cc86e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
RtlCopyUnicodeString
RtlAppendUnicodeStringToString
RtlInitUnicodeString
IofCompleteRequest
ZwClose
ZwOpenFile
_allmul
_alldiv
KeTickCount
KeQueryTimeIncrement
MmMapLockedPagesSpecifyCache
memcpy
memset

hal

WRITE_PORT_ULONG
KeStallExecutionProcessor
KfAcquireSpinLock
KfReleaseSpinLock
KeGetCurrentIrql
KfRaiseIrql
KfLowerIrql

ndis.sys

NdisWriteErrorLogEntry
NdisOpenConfigurationEx
NdisReadNetworkAddress
NdisInitializeReadWriteLock
NdisReadConfiguration
NdisMGetBusData
NdisMSetBusData
NdisDeregisterDeviceEx
NdisReleaseReadWriteLock
NdisAcquireReadWriteLock
NdisAllocateMemoryWithTag
NdisRegisterDeviceEx
NdisMSetPeriodicTimer
NdisMIndicateStatusEx
NdisCloseConfiguration
NdisMAllocateNetBufferSGList
NdisMSynchronizeWithInterruptEx
NdisMFreeSharedMemory
NdisFreeMdl
NdisFreeNetBufferListPool
NdisFreeNetBufferList
NdisMAllocateSharedMemory
NdisAllocateNetBufferAndNetBufferList
NdisAllocateNetBufferListPool
NdisAllocateMdl
NdisMIndicateReceiveNetBufferLists
NdisMSendNetBufferListsComplete
NdisMFreeNetBufferSGList
NdisMSleep
NdisMDeregisterMiniportDriver
NdisMSetMiniportAttributes
NdisWaitEvent
NdisResetEvent
NdisSetTimer
NdisMCancelTimer
NdisMDeregisterInterruptEx
NdisSetEvent
NdisMResetComplete
NdisInitializeEvent
NdisMInitializeTimer
NdisMRegisterInterruptEx
NdisMRegisterMiniportDriver
NdisAllocateMemoryWithTagPriority
NdisFreeMemory
NdisMRegisterIoPortRange
NdisMMapIoSpace
NdisMRegisterScatterGatherDma
NdisMDeregisterScatterGatherDma
NdisMDeregisterIoPortRange
NdisMUnmapIoSpace

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ef446600fda910b978db76d28cc86e2

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

ndis.sys

Sections

.text Size: 85KB - Virtual size: 84KB

.rdata Size: 1024B - Virtual size: 768B

.data Size: 7KB - Virtual size: 7KB

INIT Size: 2KB - Virtual size: 2KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 85KB - Virtual size: 84KB

.rdata
Size: 1024B - Virtual size: 768B

.data
Size: 7KB - Virtual size: 7KB

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 2KB - Virtual size: 2KB