f7f42a60d3b33428eb122e7b440f7a4ab8860796d12840ba901c691c2cc2bec8

Sharing

Copy URL Twitter E-mail

General

Target

f7f42a60d3b33428eb122e7b440f7a4ab8860796d12840ba901c691c2cc2bec8
Size

63KB
MD5

5589d9cffc6eb66ef28b0e10a44d4a20
SHA1

a5fdf239dab7a6774484c64deaad25b40a5bcf76
SHA256

f7f42a60d3b33428eb122e7b440f7a4ab8860796d12840ba901c691c2cc2bec8
SHA512

d0985f2cc005b870f01012592d2a023b2a77deb1b5e143b83493e3279eb0ae66a50ac20db139c0c87d0fc6d2e7b1bb8b6cf66bd4089427d31b2ccb6780c81d88
SSDEEP

1536:qTXFks1cVakaz6WwS32uBqIxgiBQhpmzOImKiKqplTFzaGnqt/:2iXY6+32iahpmzOImKiKqplTFzaGnq

Score

N/A

Malware Config

Signatures

Files

f7f42a60d3b33428eb122e7b440f7a4ab8860796d12840ba901c691c2cc2bec8
.dll windows x86

c571b49627325ad6556bcaa2917e1edf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwQuerySymbolicLinkObject
ZwReadFile
IoOpenDeviceRegistryKey
ExDeleteResourceLite
IoAllocateIrp
PsGetVersion
ObReferenceObjectByPointer
RtlFindLeastSignificantBit
ProbeForWrite
MmBuildMdlForNonPagedPool
RtlInitUnicodeString
ExSetResourceOwnerPointer
RtlLengthSecurityDescriptor
SeSinglePrivilegeCheck
RtlEqualUnicodeString
ExLocalTimeToSystemTime
RtlTimeFieldsToTime
KeDelayExecutionThread
KeRundownQueue
ExSystemTimeToLocalTime

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itab
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etab
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd1
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msd2
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd4
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c571b49627325ad6556bcaa2917e1edf

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 10KB - Virtual size: 10KB

.itab Size: 512B - Virtual size: 84B

.idata Size: 1024B - Virtual size: 616B

.etab Size: 512B - Virtual size: 512B

.msd3 Size: 512B - Virtual size: 28B

.msd1 Size: 512B - Virtual size: 140B

.msd2 Size: 512B - Virtual size: 140B

.msd4 Size: 512B - Virtual size: 316B

.data Size: 1KB - Virtual size: 41KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 604B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 10KB - Virtual size: 10KB

.itab
Size: 512B - Virtual size: 84B

.idata
Size: 1024B - Virtual size: 616B

.etab
Size: 512B - Virtual size: 512B

.msd3
Size: 512B - Virtual size: 28B

.msd1
Size: 512B - Virtual size: 140B

.msd2
Size: 512B - Virtual size: 140B

.msd4
Size: 512B - Virtual size: 316B

.data
Size: 1KB - Virtual size: 41KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 604B