7ad86ada3cce0085d5260b6106fb77baacc0cf0c7fa2a98f6c3ffceab53e9daa

Sharing

Copy URL Twitter E-mail

General

Target

7ad86ada3cce0085d5260b6106fb77baacc0cf0c7fa2a98f6c3ffceab53e9daa
Size

164KB
MD5

84c9181018602d9ede76f28b830a63d5
SHA1

b32f696113d81d3b0fa436123856c4b8c7ad861a
SHA256

7ad86ada3cce0085d5260b6106fb77baacc0cf0c7fa2a98f6c3ffceab53e9daa
SHA512

dc77b599c3397f10094eb59523b2717c350f4d677ec7f27dd2c5a93909b5890c976bc1a12c5a0f5341ac2a92e65d5d0fde266b9ed9b6d70e4d6d187e8d9502a6
SSDEEP

3072:wNr8mEZFjo5zDaRZ2/oLz8EJy+miCvLcw6RactcPhdbY3zkWV:G8zSDarpnNypvLcw60AV

Score

N/A

Malware Config

Signatures

Files

7ad86ada3cce0085d5260b6106fb77baacc0cf0c7fa2a98f6c3ffceab53e9daa
.exe windows x86

eac2953b8bca910a7ec1974ed2eadbcd

Code Sign

ee:82:2a:f5:30:14:f9:aa:82:ec:3f:0a:2f:ee:73:70:9d:3d:42:13
Signer

Actual PE Digest

ee:82:2a:f5:30:14:f9:aa:82:ec:3f:0a:2f:ee:73:70:9d:3d:42:13

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

NO CERTIFICATE

01/01/0001, 00:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
_purecall
IoFreeMdl
ZwOpenFile
KeBugCheckEx
MmLockPagableDataSection
MmUnlockPagableImageSection
KeQuerySystemTime
KeInitializeSpinLock
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel
_allmul
_alldiv
KeTickCount
KeQueryTimeIncrement
RtlInitUnicodeString
ZwClose

hal

KfLowerIrql
KeGetCurrentIrql
KeStallExecutionProcessor
KfAcquireSpinLock
KfReleaseSpinLock
KfRaiseIrql
KeRaiseIrqlToDpcLevel

ndis.sys

NdisAcquireReadWriteLock
NdisAllocateMemoryWithTag
NdisMDeregisterDevice
NdisInitializeReadWriteLock
NdisMRegisterDevice
NdisMFreeSharedMemory
NdisAllocateBuffer
NdisMAllocateSharedMemory
NdisAllocateBufferPool
NdisFreePacket
NdisFreePacketPool
NdisFreeBufferPool
NdisAllocatePacket
NdisAllocatePacketPool
NdisReleaseReadWriteLock
NdisSetTimer
NdisGetRoutineAddress
NdisMDeregisterInterrupt
NdisMSleep
NdisWaitEvent
NdisMCancelTimer
NdisMDeregisterAdapterShutdownHandler
NdisWriteErrorLogEntry
NdisSetEvent
NdisInitializeEvent
NdisMInitializeTimer
NdisMRegisterAdapterShutdownHandler
NdisMRegisterInterrupt
NdisReadNetworkAddress
NdisMInitializeScatterGatherDma
NdisMSetAttributesEx
NdisMSynchronizeWithInterrupt
NdisOpenConfiguration
NdisTerminateWrapper
NdisMRegisterMiniport
NdisGetVersion
NdisInitializeWrapper
NdisMRegisterIoPortRange
NdisMMapIoSpace
NdisFreeMemory
NdisMDeregisterIoPortRange
NdisMUnmapIoSpace
NdisWritePciSlotInformation
NdisReadPciSlotInformation
NdisSystemProcessorCount
NdisReadConfiguration
NdisMPciAssignResources
NdisMQueryAdapterResources
NdisResetEvent
NdisMSetPeriodicTimer
NdisCloseConfiguration

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eac2953b8bca910a7ec1974ed2eadbcd

Code Sign

ee:82:2a:f5:30:14:f9:aa:82:ec:3f:0a:2f:ee:73:70:9d:3d:42:13Signer

Signature Validations

Verification

01/01/0001, 00:00 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

ndis.sys

Sections

.text Size: 118KB - Virtual size: 117KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 5KB - Virtual size: 7KB

PAGE Size: 4KB - Virtual size: 3KB

INIT Size: 2KB - Virtual size: 2KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 3KB - Virtual size: 3KB

ee:82:2a:f5:30:14:f9:aa:82:ec:3f:0a:2f:ee:73:70:9d:3d:42:13
Signer

01/01/0001, 00:00
Valid: false

.text
Size: 118KB - Virtual size: 117KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 5KB - Virtual size: 7KB

PAGE
Size: 4KB - Virtual size: 3KB

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 3KB - Virtual size: 3KB