ddec900e22f0542e5e447dd513f11927e9deb80d58dbcdaafa738330e88efe64

Sharing

Copy URL

Twitter E-mail

General

Target

ddec900e22f0542e5e447dd513f11927e9deb80d58dbcdaafa738330e88efe64
Size

159KB
MD5

3e214661d0d24209900a21eeddf9e730
SHA1

9b75cd94dec3b5409d120b53f1deadfff012e9d1
SHA256

ddec900e22f0542e5e447dd513f11927e9deb80d58dbcdaafa738330e88efe64
SHA512

0bceae17990f84b930e6228f09cc885bdb9589828478bb1f8b2d450ea47c749525ba7ea3f593f496409a55752cbfda74e22c2390ea923cc3af2db5c509c2630e
SSDEEP

3072:4zZXV9GJOpyveIn0C2cJaJFs0r9gkJKqDm+TAnBRjvt:4VXy4A0C2ckJ4f+iBRjv

Score

N/A

Malware Config

Signatures

Files

ddec900e22f0542e5e447dd513f11927e9deb80d58dbcdaafa738330e88efe64
.dll windows x86

888318853dcb6b76d0c3ec14ed1cad6c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitAnsiString
MmIsDriverVerifying
ExSystemTimeToLocalTime
KeRemoveDeviceQueue
PoSetSystemState
MmLockPagableSectionByHandle
RtlDeleteNoSplay
ExFreePool
FsRtlIsTotalDeviceFailure
CcCopyRead
RtlFindLeastSignificantBit
ExLocalTimeToSystemTime
ZwQueryVolumeInformationFile
DbgBreakPointWithStatus
ExVerifySuite
KeEnterCriticalRegion
RtlGetNextRange
ObReferenceObjectByHandle
IoUpdateShareAccess
MmBuildMdlForNonPagedPool

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i_txt
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.e_txt
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tele3
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tele1
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tele2
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tele4
Size: 1024B - Virtual size: 531B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

888318853dcb6b76d0c3ec14ed1cad6c

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 15KB - Virtual size: 15KB

.i_txt Size: 512B - Virtual size: 84B

.e_txt Size: 512B - Virtual size: 512B

.tele3 Size: 512B - Virtual size: 28B

.tele1 Size: 512B - Virtual size: 44B

.tele2 Size: 512B - Virtual size: 44B

.tele4 Size: 1024B - Virtual size: 531B

.data Size: 22KB - Virtual size: 68KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 1024B - Virtual size: 640B

.text
Size: 15KB - Virtual size: 15KB

.i_txt
Size: 512B - Virtual size: 84B

.e_txt
Size: 512B - Virtual size: 512B

.tele3
Size: 512B - Virtual size: 28B

.tele1
Size: 512B - Virtual size: 44B

.tele2
Size: 512B - Virtual size: 44B

.tele4
Size: 1024B - Virtual size: 531B

.data
Size: 22KB - Virtual size: 68KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 1024B - Virtual size: 640B