849d319af0e72bc0e2bbc72e9e9a0aca53305dd00d3a5c71783cf42e7e600b2c

Sharing

Copy URL

Twitter E-mail

General

Target

849d319af0e72bc0e2bbc72e9e9a0aca53305dd00d3a5c71783cf42e7e600b2c
Size

32KB
MD5

aee9517a5f7be51f31ae04d0ba09ef35
SHA1

b346ef7dc573d2eb1a75dcddcd750e345857788a
SHA256

849d319af0e72bc0e2bbc72e9e9a0aca53305dd00d3a5c71783cf42e7e600b2c
SHA512

066b9d2843c1977bbec2ffb7172e587ddc6b9055fa9b0cabb6191f6ff4df2eb7fd04353bfc2325da4abe6e7dc39b10eaba9e2b923b54367cf1ba372f827fcb0e
SSDEEP

768:DJxlqlc6kOoAa1riRrA+5Vv6lyEdxMhapM7AQ:Nxlqlc6klX1QrPVvdEdxMspM8Q

Score

N/A

Malware Config

Signatures

Files

849d319af0e72bc0e2bbc72e9e9a0aca53305dd00d3a5c71783cf42e7e600b2c
.exe windows x86

06cb06fe355c1ff4544f4265cfeefe1c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_WDM_DRIVER

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IoGetDeviceProperty
IofCallDriver
IoBuildSynchronousFsdRequest
KeWaitForSingleObject
KeInitializeEvent

nvnrm.sys

_NRM_OSApiInit@4
_NRM_MCPInit@12

ndis.sys

NdisMInitializeTimer
NdisInitializeWrapper
NdisMRegisterMiniport
NdisTerminateWrapper
NdisAllocateSpinLock
NdisInitializeEvent
NdisMGetDeviceProperty
NdisMSetAttributesEx
NdisO�l�onfiguration
NdisReleaseSpinLock
NdisAcquireSpinLock
NdisFreePacket
NdisFreeBuffer
NdisUnchainBufferAtFront
NdisQueryBufferSafe
NdisGetFirstBufferFromPacketSafe
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisMAllocateSharedMemory
NdisAllocateMemoryWithTag
NdisMFreeSharedMemory
NdisFreeMemory
NdisMCancelTimer
NdisAllocateBuffer
NdisAllocatePacket
NdisAdjuruCtggesLdngui
NehsRduUimdr
NdisReadConfiguration
NdisWriteErrorLogEntry
NdisWriteConfiguration
NdisAnsiStringToUnicodeString
NdisInitAnsiString
NdisReadPciSlotInformation
NdisSetEvent
NdisFreeSpinLock
NdisMFreeMapRegisters
NdisFreePacketPool
NdisFreeBufferPool
NdisWaitEvent
NdisAllocateBufferPool
NdisAllocatePacketPool
NdisMAllocateMapRegisters
NdisMInitializeScatterGatherDma
NdisCloseConfiguration
NdisReadNetworkAddress

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 896B - Virtual size: 842B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06cb06fe355c1ff4544f4265cfeefe1c

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

nvnrm.sys

ndis.sys

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 3KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 896B - Virtual size: 842B

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 3KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 896B - Virtual size: 842B