8bacb6ed28c796b81be9363834631190e954a643bb20c4ad941f8bbc03b09ef1

Sharing

Copy URL Twitter E-mail

General

Target

8bacb6ed28c796b81be9363834631190e954a643bb20c4ad941f8bbc03b09ef1
Size

132KB
MD5

d1580c1b8c3611d7a54a2f6e02cbb0c0
SHA1

bfc3d497460b0fd6058a56c48d77329dd189806d
SHA256

8bacb6ed28c796b81be9363834631190e954a643bb20c4ad941f8bbc03b09ef1
SHA512

cd8c54ac2efd7e5e79b50fdad50abe6ab11b023af5577bc1abb5faa9ea6ead898209d701f2b65fea7da802776c343e602a6829c261d642daa845f10e28988b29
SSDEEP

3072:TiizpEkK8N1It7E2yV1WlWblB+qU45q7Tl7Lfmn57NUOZ9wb:TicEkK8N1f2yrxB+qU4Uvun5Fnw

Score

N/A

Malware Config

Signatures

Files

8bacb6ed28c796b81be9363834631190e954a643bb20c4ad941f8bbc03b09ef1
.exe windows x86

d3631ad105465c647e2c60470442cd22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeWaitForSingleObject
KeSetEvent
IofCallDriver
RtlCompareMemory
IoCreateDevice
PoCallDriver
ObfDereferenceObject
PoStartNextPowerIrp
IoAttachDeviceToDeviceStack
IoDetachDevice
RtlFreeUnicodeString
IoAllocateIrp
MmMapLockedPagesSpecifyCache
KeInitializeDpc
RtlQueryRegistryValues
IoOpenDeviceRegistryKey
IoFreeMdl
KeCancelTimer
ExFreePool
IoQueueWorkItem
IoAllocateMdl
KeInitializeTimer
IoAllocateWorkItem
IoFreeWorkItem
IoWMIRegistrationControl
KeDelayExecutionThread
ObReferenceObjectByHandle
KeSetTimer
IoSetDeviceInterfaceState
IoCancelIrp
IoRegisterDeviceInterface
ZwSetValueKey
KeReleaseSpinLockFromDpcLevel
PoRequestPowerIrp
IoGetDeviceProperty
KeAcquireSpinLockAtDpcLevel
MmBuildMdlForNonPagedPool
KeInsertQueueDpc
IoReleaseCancelSpinLock
PsTerminateSystemThread
RtlAnsiStringToUnicodeString
IoWMIWriteEvent
RtlInitAnsiString
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IoDeleteSymbolicLink
_vsnwprintf
IoInitializeRemoveLockEx
RtlUnicodeStringToAnsiString
ObfReferenceObject
IoReleaseRemoveLockEx
ZwCreateKey
KeReleaseMutex
IoCreateSymbolicLink
RtlIntegerToUnicodeString
IoGetAttachedDeviceReference
KeSetTimerEx
ExInitializeNPagedLookasideList
IoAcquireCancelSpinLock
IoDisconnectInterrupt
ZwCreateFile
RtlWriteRegistryValue
MmProbeAndLockPages
IoInvalidateDeviceRelations
IoGetDmaAdapter
KeSetPriorityThread
KeRemoveQueueDpc
IoGetDeviceObjectPointer
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d3631ad105465c647e2c60470442cd22

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 97KB - Virtual size: 97KB

.rdata Size: 512B - Virtual size: 288B

.data Size: 28KB - Virtual size: 28KB

INIT Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 672B

.text
Size: 97KB - Virtual size: 97KB

.rdata
Size: 512B - Virtual size: 288B

.data
Size: 28KB - Virtual size: 28KB

INIT
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 672B