f8020bb55f7c1bb35e05dacad66e7c3939e865b4a3e5aa0af6eba5512c356d72

Sharing

Copy URL Twitter E-mail

General

Target

f8020bb55f7c1bb35e05dacad66e7c3939e865b4a3e5aa0af6eba5512c356d72
Size

51KB
MD5

a66e331ecb11cc7fbf4ee11f553ba3e0
SHA1

00f65acc95f282b533fe10121057d5ea67f868cd
SHA256

f8020bb55f7c1bb35e05dacad66e7c3939e865b4a3e5aa0af6eba5512c356d72
SHA512

12244dd03ae40814cb3121c200b4847fefc88834fbb24e13f4ad66910ebb6f212a55eb2cc856a0ddfb08149f9a7993b66cc26d89056308ad2931952f2cb66c32
SSDEEP

768:MDxIgqp8Yp7YxQs1v0C6aCiqU3zlSqJ2QfBVxJcIhbg76FrxI9G4:uTQ1s1cVakazlSg2uBqIxgib4

Score

N/A

Malware Config

Signatures

Files

f8020bb55f7c1bb35e05dacad66e7c3939e865b4a3e5aa0af6eba5512c356d72
.dll windows x86

996e57d9f1caf974cd50ca720d49f8c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ExFreePoolWithTag
RtlInitUnicodeString
ExLocalTimeToSystemTime
IoGetDeviceInterfaces
RtlQueryRegistryValues
RtlEqualUnicodeString
KeResetEvent
IoSetHardErrorOrVerifyDevice
RtlGUIDFromString
IoCreateNotificationEvent
ExSystemTimeToLocalTime
RtlTimeFieldsToTime
KeRemoveQueueDpc
RtlFindLeastSignificantBit
IoInitializeTimer
RtlDeleteRegistryValue
IoInvalidateDeviceState

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itab
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etab
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd1
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msd2
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd4
Size: 512B - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

996e57d9f1caf974cd50ca720d49f8c0

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 10KB - Virtual size: 10KB

.itab Size: 512B - Virtual size: 72B

.idata Size: 1024B - Virtual size: 536B

.etab Size: 512B - Virtual size: 512B

.msd3 Size: 512B - Virtual size: 28B

.msd1 Size: 512B - Virtual size: 140B

.msd2 Size: 512B - Virtual size: 140B

.msd4 Size: 512B - Virtual size: 268B

.data Size: 1KB - Virtual size: 41KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 656B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 10KB - Virtual size: 10KB

.itab
Size: 512B - Virtual size: 72B

.idata
Size: 1024B - Virtual size: 536B

.etab
Size: 512B - Virtual size: 512B

.msd3
Size: 512B - Virtual size: 28B

.msd1
Size: 512B - Virtual size: 140B

.msd2
Size: 512B - Virtual size: 140B

.msd4
Size: 512B - Virtual size: 268B

.data
Size: 1KB - Virtual size: 41KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 656B