479d1ba7759e281f764e111e9ee65729fb050f7333590bc4be69a694556058ff

Sharing

Copy URL Twitter E-mail

General

Target

479d1ba7759e281f764e111e9ee65729fb050f7333590bc4be69a694556058ff
Size

164KB
MD5

e524f1509bc597470495071b34beabd5
SHA1

93316cbc5b717d5441a5d499e8e8197494253abb
SHA256

479d1ba7759e281f764e111e9ee65729fb050f7333590bc4be69a694556058ff
SHA512

1fbd99360bb578a90837787f658de524203f0cbd1cdde8131483965c2f3bfacf0682a40bba1b1a4a70878ee984afeef89dfb0ef19c1e46ff85f315a1b0a49c6d
SSDEEP

3072:lNrnmEZFjo5zDaRZ2/oiz8IJy+miCvLcw6RactcPhdbY3XkwV:3nzSDarp+9ypvLcw60mV

Score

N/A

Malware Config

Signatures

Files

479d1ba7759e281f764e111e9ee65729fb050f7333590bc4be69a694556058ff
.exe windows x86

eac2953b8bca910a7ec1974ed2eadbcd

Code Sign

ae:a6:38:19:37:f6:07:d2:f5:35:f3:b6:78:72:6c:36:14:45:3e:e2
Signer

Actual PE Digest

ae:a6:38:19:37:f6:07:d2:f5:35:f3:b6:78:72:6c:36:14:45:3e:e2

Digest Algorithm

sha1

PE Digest Matches

false

Signature Validations

Trusted

false

Verification

Signing Certificate

NO CERTIFICATE

01/01/0001, 00:00
Valid: false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
RtlAppendUnicodeStringToString
RtlCopyUnicodeString
_purecall
IoFreeMdl
ZwOpenFile
KeBugCheckEx
MmLockPagableDataSection
MmUnlockPagableImageSection
KeQuerySystemTime
KeInitializeSpinLock
KefAcquireSpinLockAtDpcLevel
KefReleaseSpinLockFromDpcLevel
_allmul
_alldiv
KeTickCount
KeQueryTimeIncrement
RtlInitUnicodeString
ZwClose

hal

KfLowerIrql
KeGetCurrentIrql
KeStallExecutionProcessor
KfAcquireSpinLock
KfReleaseSpinLock
KfRaiseIrql
KeRaiseIrqlToDpcLevel

ndis.sys

NdisAcquireReadWriteLock
NdisAllocateMemoryWithTag
NdisMDeregisterDevice
NdisInitializeReadWriteLock
NdisMRegisterDevice
NdisMFreeSharedMemory
NdisAllocateBuffer
NdisMAllocateSharedMemory
NdisAllocateBufferPool
NdisFreePacket
NdisFreePacketPool
NdisFreeBufferPool
NdisAllocatePacket
NdisAllocatePacketPool
NdisReleaseReadWriteLock
NdisSetTimer
NdisGetRoutineAddress
NdisMDeregisterInterrupt
NdisMSleep
NdisWaitEvent
NdisMCancelTimer
NdisMDeregisterAdapterShutdownHandler
NdisWriteErrorLogEntry
NdisSetEvent
NdisInitializeEvent
NdisMInitializeTimer
NdisMRegisterAdapterShutdownHandler
NdisMRegisterInterrupt
NdisReadNetworkAddress
NdisMInitializeScatterGatherDma
NdisMSetAttributesEx
NdisMSynchronizeWithInterrupt
NdisOpenConfiguration
NdisTerminateWrapper
NdisMRegisterMiniport
NdisGetVersion
NdisInitializeWrapper
NdisMRegisterIoPortRange
NdisMMapIoSpace
NdisFreeMemory
NdisMDeregisterIoPortRange
NdisMUnmapIoSpace
NdisWritePciSlotInformation
NdisReadPciSlotInformation
NdisSystemProcessorCount
NdisReadConfiguration
NdisMPciAssignResources
NdisMQueryAdapterResources
NdisResetEvent
NdisMSetPeriodicTimer
NdisCloseConfiguration

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eac2953b8bca910a7ec1974ed2eadbcd

Code Sign

ae:a6:38:19:37:f6:07:d2:f5:35:f3:b6:78:72:6c:36:14:45:3e:e2Signer

Signature Validations

Verification

01/01/0001, 00:00 Valid: false

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

ndis.sys

Sections

.text Size: 118KB - Virtual size: 117KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 5KB - Virtual size: 7KB

PAGE Size: 4KB - Virtual size: 3KB

INIT Size: 2KB - Virtual size: 2KB

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 3KB - Virtual size: 3KB

ae:a6:38:19:37:f6:07:d2:f5:35:f3:b6:78:72:6c:36:14:45:3e:e2
Signer

01/01/0001, 00:00
Valid: false

.text
Size: 118KB - Virtual size: 117KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 5KB - Virtual size: 7KB

PAGE
Size: 4KB - Virtual size: 3KB

INIT
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 3KB - Virtual size: 3KB