fac7fb8b98f52bbd35563b5ce1adffb0ae54a5f264016fd06a04dc2b327aa0ea

General

Target

fac7fb8b98f52bbd35563b5ce1adffb0ae54a5f264016fd06a04dc2b327aa0ea
Size

10KB
MD5

8521ab1583e71088c2a22d2558ffec6b
SHA1

7aa3f2cbcb64bb04abe00de55c043910621a3d6e
SHA256

fac7fb8b98f52bbd35563b5ce1adffb0ae54a5f264016fd06a04dc2b327aa0ea
SHA512

3d669310b2822cfa0c881b7dc486f79bf9ed0b4c3db93d5612fd2271188c1d01e9f2ba2ea49b70f66ee6ebbb3002b581b574e5569f2aee95bbf20858fb5ceae4
SSDEEP

192:SnmJXnoP+Z8xENkf/eIob8/tpGJagpjeAeanfFLYDEkgB:fJ3oWZwFfJobrXpqzafFTR

Score

N/A

Malware Config

Signatures

Files

fac7fb8b98f52bbd35563b5ce1adffb0ae54a5f264016fd06a04dc2b327aa0ea
.exe windows x86

8ccd864f816af79a5766e6c1a7a27297

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
KeInitializeTimer
KeSetTimer
KeInitializeSpinLock
swprintf
KeCancelTimer
ExFreePool
ExAllocatePoolWithTag
KeInitializeDpc
InterlockedIncrement
InterlockedDecrement

hal

KeStallExecutionProcessor
WRITE_PORT_UCHAR
READ_PORT_UCHAR

portcls.sys

PcAddAdapterDevice
PcInitializeAdapterDriver
PcNewInterruptSync
PcNewServiceGroup
PcGetTimeInterval
PcRegisterSubdevice
PcNewPort

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 896B - Virtual size: 842B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 896B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 706B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ccd864f816af79a5766e6c1a7a27297

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

portcls.sys

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 896B - Virtual size: 842B

.data Size: 896B - Virtual size: 872B

PAGE Size: 2KB - Virtual size: 2KB

INIT Size: 768B - Virtual size: 706B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 384B - Virtual size: 376B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 896B - Virtual size: 842B

.data
Size: 896B - Virtual size: 872B

PAGE
Size: 2KB - Virtual size: 2KB

INIT
Size: 768B - Virtual size: 706B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 384B - Virtual size: 376B