79cd3bf3c0ff956933bb165473af97e1934d210e3703842fd0ae70402542728b

Sharing

Copy URL Twitter E-mail

General

Target

79cd3bf3c0ff956933bb165473af97e1934d210e3703842fd0ae70402542728b
Size

159KB
MD5

86b2092804e0337a5f870db957fc0a73
SHA1

6d29fe732b063ccf3cd9518dc6e91cb4806da8b3
SHA256

79cd3bf3c0ff956933bb165473af97e1934d210e3703842fd0ae70402542728b
SHA512

4082d921cfb9e386107231ee469eeeb7453137205149a174b228f67980e860ad8d10f02648f6d7711bfd2271f2541b96266cfdbe9cbf2d0d1140a6cc458c300d
SSDEEP

3072:DL7Y6KR8iMFE+Y0Dv0DzxOpyveIn0C2cJaJFs0r9gkJKqDm+TAnBRjvt:DLU6EnMFE3zwA0C2ckJ4f+iBRjv

Score

N/A

Malware Config

Signatures

Files

79cd3bf3c0ff956933bb165473af97e1934d210e3703842fd0ae70402542728b
.dll windows x86

ef49e63ba0367909c22c4396efe16661

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

MmFreePagesFromMdl
ObReferenceObjectByPointer
FsRtlFreeFileLock
FsRtlMdlWriteCompleteDev
SeSinglePrivilegeCheck
RtlCheckRegistryKey
RtlFindLeastSignificantBit
RtlEqualString
RtlUpcaseUnicodeChar
MmProbeAndLockPages
RtlInitUnicodeString
RtlEqualUnicodeString
KeInsertByKeyDeviceQueue
ProbeForWrite
RtlInitString
FsRtlCheckLockForWriteAccess
RtlInt64ToUnicodeString
CcCopyRead
RtlxUnicodeStringToAnsiSize
PoUnregisterSystemState
RtlValidSid
RtlInitAnsiString
RtlTimeToSecondsSince1970
KeInitializeTimerEx

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 716B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dir
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ahelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdat
Size: 1024B - Virtual size: 697B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef49e63ba0367909c22c4396efe16661

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 11KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 40KB

.idat Size: 512B - Virtual size: 100B

.idata Size: 1024B - Virtual size: 716B

.dir Size: 512B - Virtual size: 28B

.ihelp Size: 512B - Virtual size: 140B

.ahelp Size: 512B - Virtual size: 140B

.init Size: 10KB - Virtual size: 9KB

.vdat Size: 1024B - Virtual size: 697B

.rsrc Size: 22KB - Virtual size: 21KB

.reloc Size: 1024B - Virtual size: 516B

.text
Size: 11KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 40KB

.idat
Size: 512B - Virtual size: 100B

.idata
Size: 1024B - Virtual size: 716B

.dir
Size: 512B - Virtual size: 28B

.ihelp
Size: 512B - Virtual size: 140B

.ahelp
Size: 512B - Virtual size: 140B

.init
Size: 10KB - Virtual size: 9KB

.vdat
Size: 1024B - Virtual size: 697B

.rsrc
Size: 22KB - Virtual size: 21KB

.reloc
Size: 1024B - Virtual size: 516B