958f8db0d4d289ecc08377f73132874f5c0a349199042c816f5018547afc5b08

General

Target

958f8db0d4d289ecc08377f73132874f5c0a349199042c816f5018547afc5b08
Size

9KB
MD5

d27131563c1c31144ed816825bed702b
SHA1

fe51019aacca84c75a7b97447e73cae106ef1291
SHA256

958f8db0d4d289ecc08377f73132874f5c0a349199042c816f5018547afc5b08
SHA512

4b81230a05004757dcd26c6fa22407ce4198aa06e2624584328b14631cd35e4b1d28b367d5ba1ec630a617e207c4c369de9f19f92ceb11273156f7a743b58dc3
SSDEEP

192:xvLy/98EAJuIbqb4ninNIHjg9g3hrfEfx+dEV:JLM98Y8ViNIHc9g3hbJ

Score

N/A

Malware Config

Signatures

Files

958f8db0d4d289ecc08377f73132874f5c0a349199042c816f5018547afc5b08
.exe windows x86

5cabb0c49f9e980673d03461a95cd588

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

MmUnmapLockedPages
READ_REGISTER_ULONG
WRITE_REGISTER_ULONG
MmMapIoSpace
KeSetEvent
KeWaitForSingleObject
IofCallDriver
KeInitializeEvent
IoDeleteDevice
IoDetachDevice
IoRegisterDeviceInterface
IoAttachDeviceToDeviceStack
IoCreateDevice
MmUnmapIoSpace
IofCompleteRequest
IoFreeMdl
MmMapLockedPagesSpecifyCache
KeClearEvent
IoAllocateMdl
KefAcquireSpinLockAtDpcLevel
IoReleaseCancelSpinLock
KeInitializeSpinLock
MmBuildMdlForNonPagedPool
RtlFreeUnicodeString
IoSetDeviceInterfaceState
PoCallDriver
PoStartNextPowerIrp
KeTickCount
MmAllocateContiguousMemory
MmFreeContiguousMemory
MmGetPhysicalAddress

hal

KfReleaseSpinLock
KfAcquireSpinLock

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 266B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5cabb0c49f9e980673d03461a95cd588

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 384B - Virtual size: 266B

.data Size: 128B - Virtual size: 12B

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 436B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 384B - Virtual size: 266B

.data
Size: 128B - Virtual size: 12B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 436B