c45ac85034d12928bb2455eafdb7d2984d1f5f6d7e84e32e3f1bbc3aefab5ab3

General

Target

c45ac85034d12928bb2455eafdb7d2984d1f5f6d7e84e32e3f1bbc3aefab5ab3
Size

72KB
MD5

96bc4e84b5d6f2138a9408e3777faed8
SHA1

a8a5335035e84ce854ef29728b53232272b63e56
SHA256

c45ac85034d12928bb2455eafdb7d2984d1f5f6d7e84e32e3f1bbc3aefab5ab3
SHA512

e7ca79c7ed5bee68e2f8344a1d89e726c4205679767328ab3b4d749fcc96b17687386856127784b43fa188b8de82b2dd27cc5516bddea9405a5867647df27897
SSDEEP

1536:VQfWpgcqVHQflQ9H7cQody7LxIx1iy19XYBVo+g67:VQOycqVHklQ9Hwj0HoD9Oe+g

Score

N/A

Malware Config

Signatures

Files

c45ac85034d12928bb2455eafdb7d2984d1f5f6d7e84e32e3f1bbc3aefab5ab3
.dll windows x86

8cf915f883e12fbfffed33c7fa0351e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlEnumerateGenericTable
RtlGetNtGlobalFlags
RtlLargeIntegerNegate
ZwWriteFile
RtlImageNtHeader
ExFreePool
WRITE_REGISTER_ULONG
KeRemoveEntryDeviceQueue
memcpy
InitSafeBootMode
KiAcquireSpinLock
SeQueryInformationToken
ZwCreateSection
ZwMapViewOfSection
WRITE_REGISTER_BUFFER_UCHAR
ExAllocatePool
RtlRealSuccessor
KeInitializeQueue
ZwOpenFile
ObQueryObjectAuditingByHandle

classpnp.sys

ClassAcquireChildLock
ClassInitializeTestUnitPolling
ClassReleaseChildLock
ClassAsynchronousCompletion
ClassWmiFireEvent
ClassEnableMediaChangeDetection
ClassMarkChildrenMissing
ClassQueryTimeOutRegistryValue
ClassIoComplete

hal

HalReadDmaCounter
ExReleaseFastMutex
KeTryToAcquireQueuedSpinLock
KdComPortInUse
HalGetBusData
KeStallExecutionProcessor
HalReturnToFirmware
HalCalibratePerformanceCounter
IoReadPartitionTable
HalAcquireDisplayOwnership
READ_PORT_BUFFER_USHORT
HalInitializeProcessor
READ_PORT_BUFFER_UCHAR

Exports

Exports

UrtfhqmTupjCbkosGlj
PehpqhIencPraehk
SocJvcxKmboqtSki
OoNjhjvoHuzguslNy

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8cf915f883e12fbfffed33c7fa0351e5

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

classpnp.sys

hal

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 64KB - Virtual size: 151KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 44B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 64KB - Virtual size: 151KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 44B