37e16d7a8cf19950b7713d681ee8508476a993e455fe2131c6e510b333544dca

General

Target

37e16d7a8cf19950b7713d681ee8508476a993e455fe2131c6e510b333544dca
Size

64KB
MD5

f8174c202f088e6b08c58f08f6071140
SHA1

c46e4e7f6cb7da40955d281783f9107768c9d9a8
SHA256

37e16d7a8cf19950b7713d681ee8508476a993e455fe2131c6e510b333544dca
SHA512

3247fd142fffee081ffda3db1c33af80fcc98894466c95bb5e1792f7ffaa150b32574ed6f93cd9a8dc2bab522de9656ea85a0cf85100812fec9aad49da271931
SSDEEP

1536:OnqOoKmrLP+a988Me62eQSy4uM73Wg3j9Ofi/:dOoJb83R2p4X73DOf

Score

N/A

Malware Config

Signatures

Files

37e16d7a8cf19950b7713d681ee8508476a993e455fe2131c6e510b333544dca
.dll windows x86

39195ad45a3d9bec9e2b892ba43366a3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

SeAccessCheck
SeQueryInformationToken
WmiQueryTraceInformation
KeRemoveDeviceQueue
IoReleaseCancelSpinLock
PsImpersonateClient
RtlFreeAnsiString
KeBugCheckEx
_aulldiv
PsGetCurrentProcess
RtlFindClearBits
IoEnumerateDeviceObjectList
ExDeletePagedLookasideList
wcsstr
KeCancelTimer
ZwOpenProcess
CcMapData
ObReferenceObjectByHandle
wcscmp
IoCsqRemoveIrp
KeReadStateEvent
RtlCompareMemory
IoFreeErrorLogEntry
KeInsertQueue
_allmul
MmUnmapIoSpace

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.Reel
Size: 1024B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Re82
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Lax503
Size: 512B - Virtual size: 437B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 844B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Bulk
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39195ad45a3d9bec9e2b892ba43366a3

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 9KB - Virtual size: 8KB

.Reel Size: 1024B - Virtual size: 9KB

.Re82 Size: 16KB - Virtual size: 16KB

.Lax503 Size: 512B - Virtual size: 437B

.data Size: 1024B - Virtual size: 844B

.Bulk Size: 22KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 9KB - Virtual size: 8KB

.Reel
Size: 1024B - Virtual size: 9KB

.Re82
Size: 16KB - Virtual size: 16KB

.Lax503
Size: 512B - Virtual size: 437B

.data
Size: 1024B - Virtual size: 844B

.Bulk
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB