f835e134406889816c482626eb905af64fa8809c493ea04b60ab6795b51933fc

Sharing

Copy URL Twitter E-mail

General

Target

f835e134406889816c482626eb905af64fa8809c493ea04b60ab6795b51933fc
Size

76KB
MD5

5c1c0b9dbc44408820ec4fff59308400
SHA1

cf95e4c3eb54cd825f0320875e4fee860ac17a46
SHA256

f835e134406889816c482626eb905af64fa8809c493ea04b60ab6795b51933fc
SHA512

9fae50e95d856c155cea9f92708595f8463b9f9d5e3cfd83977a28524c2ef22f3c0798fbe205b42fc30bdc489fe7c33c474cda5d913ce21360913930c72b99cd
SSDEEP

768:e1fKvBpJF8vJgfefg4JMW8RrrDHWK6RFRXwMJYjmdvvLoQW3VVTrYU01+KYAr9jd:e1fK7Yg221rLARXZJjLrURsM+t1nx

Score

N/A

Malware Config

Signatures

Files

f835e134406889816c482626eb905af64fa8809c493ea04b60ab6795b51933fc
.dll windows x86

ba2e017150c862dff710d1e5cf546284

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoBuildSynchronousFsdRequest
ExVerifySuite
SeCaptureSubjectContext
ProbeForWrite
RtlAnsiStringToUnicodeString
ExSystemTimeToLocalTime
IoInitializeIrp
IoGetDeviceObjectPointer
RtlInitAnsiString
MmForceSectionClosed
ExLocalTimeToSystemTime
KeRemoveDeviceQueue
RtlClearAllBits
KeInsertByKeyDeviceQueue
RtlUnicodeStringToInteger
IoInvalidateDeviceState
MmSecureVirtualMemory
RtlFindLeastSignificantBit
MmPageEntireDriver

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i_txt
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e_txt
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tele3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tele1
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tele2
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tele4
Size: 1024B - Virtual size: 563B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba2e017150c862dff710d1e5cf546284

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 12KB - Virtual size: 11KB

.i_txt Size: 512B - Virtual size: 80B

.e_txt Size: 512B - Virtual size: 512B

.tele3 Size: 512B - Virtual size: 28B

.tele1 Size: 512B - Virtual size: 44B

.tele2 Size: 512B - Virtual size: 44B

.tele4 Size: 1024B - Virtual size: 563B

.data Size: 17KB - Virtual size: 64KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 1024B - Virtual size: 656B

.text
Size: 12KB - Virtual size: 11KB

.i_txt
Size: 512B - Virtual size: 80B

.e_txt
Size: 512B - Virtual size: 512B

.tele3
Size: 512B - Virtual size: 28B

.tele1
Size: 512B - Virtual size: 44B

.tele2
Size: 512B - Virtual size: 44B

.tele4
Size: 1024B - Virtual size: 563B

.data
Size: 17KB - Virtual size: 64KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 1024B - Virtual size: 656B