36a6c57577a991222f82b3558a19d3ccb7fda905516c46335311aeac5398e598

General

Target

36a6c57577a991222f82b3558a19d3ccb7fda905516c46335311aeac5398e598
Size

135KB
MD5

f2c551412b79d680fa5eb79fd18cc6e0
SHA1

65d5897b44306cb62fccf3c23121ab336f33b9f6
SHA256

36a6c57577a991222f82b3558a19d3ccb7fda905516c46335311aeac5398e598
SHA512

3aead92fe1c70822c1a7e253dbabc52c4b49e1118f800ffc07aec68b10ac1984e2be5bae10f9edef8cddd700aa731bfec5c5e9b51f2727b9e80f1c13bc7115fe
SSDEEP

3072:xOoJb83R2p4X73jU7ZEAi0Gv7YHZE76VuLFUSfSEp:twf7zU7Zpi5YHaVLa7

Score

N/A

Malware Config

Signatures

Files

36a6c57577a991222f82b3558a19d3ccb7fda905516c46335311aeac5398e598
.dll windows x86

39195ad45a3d9bec9e2b892ba43366a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

SeAccessCheck
SeQueryInformationToken
WmiQueryTraceInformation
KeRemoveDeviceQueue
IoReleaseCancelSpinLock
PsImpersonateClient
RtlFreeAnsiString
KeBugCheckEx
_aulldiv
PsGetCurrentProcess
RtlFindClearBits
IoEnumerateDeviceObjectList
ExDeletePagedLookasideList
wcsstr
KeCancelTimer
ZwOpenProcess
CcMapData
ObReferenceObjectByHandle
wcscmp
IoCsqRemoveIrp
KeReadStateEvent
RtlCompareMemory
IoFreeErrorLogEntry
KeInsertQueue
_allmul
MmUnmapIoSpace

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Reel
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 512B - Virtual size: 437B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 844B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Bulk
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39195ad45a3d9bec9e2b892ba43366a3

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 9KB - Virtual size: 8KB

.Reel Size: 1024B - Virtual size: 9KB

.Re82 Size: 16KB - Virtual size: 16KB

.Lax503 Size: 512B - Virtual size: 437B

.data Size: 1024B - Virtual size: 844B

.Bulk Size: 22KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 8KB

.Reel
Size: 1024B - Virtual size: 9KB

.Re82
Size: 16KB - Virtual size: 16KB

.Lax503
Size: 512B - Virtual size: 437B

.data
Size: 1024B - Virtual size: 844B

.Bulk
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB