bba9fd780409f0bb95749bc0d6fff3fe571a3282bd7ff5e28eea6676a239bb58

Sharing

Copy URL

Twitter E-mail

General

Target

bba9fd780409f0bb95749bc0d6fff3fe571a3282bd7ff5e28eea6676a239bb58
Size

23KB
MD5

537d827afde5dc31321e2003e1566208
SHA1

529079998d7739605902a92fb429e6a13be84a0a
SHA256

bba9fd780409f0bb95749bc0d6fff3fe571a3282bd7ff5e28eea6676a239bb58
SHA512

65448558a61f0108b82acf05171b5506127a92d6eb20fceef0f6981fe7c433df9cb2e45bfca40e105081f11ad5260b4b498b97248d357c919ba6cbd5c6773e53
SSDEEP

384:YXIP/2+3yWEEpq1NKn7LHJvj/9gDtod+nF4Vj/KrznfAThyApmVZG8v2AmfSiklC:Y4JHEaHZ9gmpKnATFmVZpv21apP

Score

N/A

Malware Config

Signatures

Files

bba9fd780409f0bb95749bc0d6fff3fe571a3282bd7ff5e28eea6676a239bb58
.dll windows x86

3b1e5f213ec6bb9c37a0c3f2b19324b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoFreeIrp
IoAllocateIrp
KeReleaseSemaphore
ExfInterlockedInsertTailList
ExfInterlockedInsertHeadList
PsTerminateSystemThread
ExfInterlockedRemoveHeadList
KeWaitForSingleObject
KeSetPriorityThread
KeGetCurrentThread
IofCallDriver
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
IoCancelIrp
InterlockedDecrement
ExAllocatePoolWithTag
InterlockedIncrement
KeInitializeSpinLock
KeInitializeSemaphore
ExFreePool
RtlCompareMemory
KeSetEvent
KeInitializeEvent
KeDelayExecutionThread
ZwClose
ObReferenceObjectByHandle
PsCreateSystemThread
ObfDereferenceObject
ZwQueryValueKey
RtlInitUnicodeString
InterlockedExchange
InterlockedCompareExchange
KeReadStateSemaphore
ExQueueWorkItem

hal

KeGetCurrentIrql
KfAcquireSpinLock
KfReleaseSpinLock

stream.sys

StreamClassQueryMasterClockSync
StreamClassDeviceNotification
StreamClassRegisterAdapter
StreamClassStreamNotification

usbd.sys

USBD_ParseConfigurationDescriptorEx
USBD_CreateConfigurationRequestEx

Exports

Exports

DllUnload
USBCAMD_AdapterReceivePacket
USBCAMD_ControlVendorCommand
USBCAMD_Debug_LogEntry
USBCAMD_DriverEntry
USBCAMD_GetRegistryKeyValue
USBCAMD_InitializeNewInterface
USBCAMD_SelectAlternateInterface

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 137B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 384B - Virtual size: 335B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGECONS
Size: 128B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 768B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b1e5f213ec6bb9c37a0c3f2b19324b3

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

stream.sys

usbd.sys

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 17KB

.rdata Size: 512B - Virtual size: 392B

.data Size: 256B - Virtual size: 137B

.edata Size: 384B - Virtual size: 335B

PAGECONS Size: 128B - Virtual size: 80B

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 768B - Virtual size: 722B

.text
Size: 18KB - Virtual size: 17KB

.rdata
Size: 512B - Virtual size: 392B

.data
Size: 256B - Virtual size: 137B

.edata
Size: 384B - Virtual size: 335B

PAGECONS
Size: 128B - Virtual size: 80B

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 768B - Virtual size: 722B