af911e7a52c361290287ffd8b84df391efa03a62ec5ebc44e97cb4a1747eb334

Sharing

Copy URL Twitter E-mail

General

Target

af911e7a52c361290287ffd8b84df391efa03a62ec5ebc44e97cb4a1747eb334
Size

57KB
MD5

e0cbdd784215a12b0309efe25689d030
SHA1

6ba879b1e769d8937dbf5301600c4a3721ff15c2
SHA256

af911e7a52c361290287ffd8b84df391efa03a62ec5ebc44e97cb4a1747eb334
SHA512

2ff60d07f868dd58f4a8f8f916de475e88ba481d7158a25b4751caa86763ef76cf9ed1d7d2f84eb41044e37451a33cbe9b02b3a4b96cdf4dd6cd8b919fb0ede4
SSDEEP

1536:TdS5+s1cVakazeMS9Nld/tglhRnaXTtbJUsVa:TdS5WXYep9Nb/KlhRnaRFfV

Score

N/A

Malware Config

Signatures

Files

af911e7a52c361290287ffd8b84df391efa03a62ec5ebc44e97cb4a1747eb334
.dll windows x86

10d63b22d6b11cf62ebc1458021025f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlUnicodeToMultiByteN
RtlInitUnicodeString
ExSetTimerResolution
KeSetKernelStackSwapEnable
RtlAppendUnicodeToString
RtlFindLeastSignificantBit
KeSetPriorityThread
IoReportDetectedDevice
KeRemoveEntryDeviceQueue
ObReleaseObjectSecurity
KeBugCheckEx
RtlEqualUnicodeString
RtlTimeFieldsToTime
IoGetAttachedDeviceReference
ExAcquireResourceSharedLite
FsRtlNotifyUninitializeSync
IoUpdateShareAccess
RtlFindNextForwardRunClear
CcFastMdlReadWait
ExSystemTimeToLocalTime
RtlDeleteRegistryValue
ExLocalTimeToSystemTime

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itab
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.etab
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd1
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msd2
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msd4
Size: 1024B - Virtual size: 733B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

10d63b22d6b11cf62ebc1458021025f9

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 10KB - Virtual size: 10KB

.itab Size: 512B - Virtual size: 92B

.idata Size: 1024B - Virtual size: 714B

.etab Size: 512B - Virtual size: 512B

.msd3 Size: 512B - Virtual size: 28B

.msd1 Size: 512B - Virtual size: 140B

.msd2 Size: 512B - Virtual size: 140B

.msd4 Size: 1024B - Virtual size: 733B

.data Size: 1KB - Virtual size: 41KB

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 628B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 10KB - Virtual size: 10KB

.itab
Size: 512B - Virtual size: 92B

.idata
Size: 1024B - Virtual size: 714B

.etab
Size: 512B - Virtual size: 512B

.msd3
Size: 512B - Virtual size: 28B

.msd1
Size: 512B - Virtual size: 140B

.msd2
Size: 512B - Virtual size: 140B

.msd4
Size: 1024B - Virtual size: 733B

.data
Size: 1KB - Virtual size: 41KB

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 628B