d9b5657495ba076ebf54dda68142fb85b72834e3e026b4c6a79ab0a64c6ebcbb

General

Target

d9b5657495ba076ebf54dda68142fb85b72834e3e026b4c6a79ab0a64c6ebcbb
Size

129KB
MD5

e1e611739e3b442a1d63bb49d8fe1541
SHA1

285b5c4b72034d3e8e0cd00d7519c6c02b23f1d8
SHA256

d9b5657495ba076ebf54dda68142fb85b72834e3e026b4c6a79ab0a64c6ebcbb
SHA512

adccc382d83f9caeb415b3a9a12b17c70f8c788069536822e3c513b82cbcc987b11ec369c99a756d21b7c08282fba6324913d469daa78f453364c2fd165b9ee4
SSDEEP

3072:iEW7IKDai16x6/HyVX/swDQ7j1HJJGNVrREft1:i7bae6xd/swDQ8Q

Score

N/A

Malware Config

Signatures

Files

d9b5657495ba076ebf54dda68142fb85b72834e3e026b4c6a79ab0a64c6ebcbb
.exe windows x86

2d9ca77e81d85b49faba45b668d740d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

ntoskrnl.exe

ExInterlockedAddLargeStatistic
ExQueueWorkItem
IoAdapterObjectType
IoWriteTransferCount
ExAllocatePool
IoRegisterFileSystem
ZwInitiatePowerAction
RtlIsNameLegalDOS8Dot3
ProbeForRead
MmAllocateContiguousMemorySpecifyCache
KeSetTimeIncrement
ZwConnectPort
READ_REGISTER_BUFFER_UCHAR
KeInsertByKeyDeviceQueue
RtlTraceDatabaseEnumerate

hal

IoWritePartitionTable
KeAcquireSpinLock
HalAllocateAdapterChannel
HalProcessorIdle
HalBeginSystemInterrupt
HalStartNextProcessor
HalFlushCommonBuffer
HalGetBusData
HalQueryRealTimeClock

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d9ca77e81d85b49faba45b668d740d2

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 44KB - Virtual size: 43KB

INIT Size: 1024B - Virtual size: 764B

.rsrc Size: 1024B - Virtual size: 760B

.reloc Size: 1024B - Virtual size: 12B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 44KB - Virtual size: 43KB

INIT
Size: 1024B - Virtual size: 764B

.rsrc
Size: 1024B - Virtual size: 760B

.reloc
Size: 1024B - Virtual size: 12B