acbf7780134f245ca47e6d9b246fabae4ec5de2f85b1df221f92e2eb50dec707

General

Target

acbf7780134f245ca47e6d9b246fabae4ec5de2f85b1df221f92e2eb50dec707
Size

57KB
MD5

27c0bf8af2f7a843db0621c1836c849c
SHA1

3175d70bc8294a2cca44cfea6f80b6f4e87390f7
SHA256

acbf7780134f245ca47e6d9b246fabae4ec5de2f85b1df221f92e2eb50dec707
SHA512

b7ee414683dafc4ec0ea66164709d49e20ddcc5b9d942922ebfa4d7348f2c5661ea5af3320f7887107f8eb74bbc97ec54c7b01759ffa30b55e7a05b9a45ef8e5
SSDEEP

768:b+iqvawq8Eqz95MgTFhRbWe/V3cyrGIhm6y9XHWiHUmT+ZFLsDe9nLT9Ym0ICaU2:HeLai5MgB2aGWliHMeDIPDC0GB

Score

N/A

Malware Config

Signatures

Files

acbf7780134f245ca47e6d9b246fabae4ec5de2f85b1df221f92e2eb50dec707
.dll windows x86

daf48ed9766a8602359e97df27579c6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlCompareString
KeCancelTimer
IoGetAttachedDevice
strcpy
RtlInitUnicodeString
IoGetDeviceProperty
IoIsWdmVersionAvailable
KeRemoveByKeyDeviceQueue
RtlEnumerateGenericTable
RtlSecondsSince1970ToTime
RtlFreeAnsiString
RtlUpcaseUnicodeString
IoStartPacket
FsRtlSplitLargeMcb
RtlEqualUnicodeString
KeInitializeTimerEx
RtlxUnicodeStringToAnsiSize
KeSaveFloatingPointState
KeRundownQueue
RtlInitString
IoCreateSymbolicLink
IoSetShareAccess
RtlEqualString
IoGetDeviceInterfaceAlias
RtlLengthSecurityDescriptor
PsGetCurrentThreadId
IoReleaseCancelSpinLock
RtlIntegerToUnicodeString

Exports

Exports

xhadT_YRPEmhPNUg_qga
cchsn_joDO
IYUOGARA_JJ__wvlhx_w_slgkh_x____
qpmtuSXahPWQ_E
YPXkz___rnpx__uyjsDN_LJuhvvao
feqhzWAcTWHYNLYA_JxirsdhS
vcalotS_D_EW_tKOFmwhH__A_j_QHS_H_Z_YV_ceuqqsZ
z_CLQad_paLni
rnA__VYPV_Z_OKGSFjflxpnzeVVRMZ__fbm_ipgIL_RQHEJVLSJ_B
grdocgkwI_
I_xh_fso__v_top_ys_xhtyQ_LDQIVPswohch__ddvqqDLDCmbgmhzs

Sections

.text
Size: 24KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

daf48ed9766a8602359e97df27579c6e

Headers

File Characteristics

Imports

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 87KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 10KB - Virtual size: 9KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 1024B - Virtual size: 984B

.text
Size: 24KB - Virtual size: 87KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 1024B - Virtual size: 984B