c14092d313e4d5f6648610042321215d188bc57c7e26e96a46046fc38aab3c21

General

Target

c14092d313e4d5f6648610042321215d188bc57c7e26e96a46046fc38aab3c21
Size

22KB
MD5

40e837489a6f3f5e1f285967c89e3240
SHA1

287eb368c16d4895075d7f59cf5a05e44bf99b47
SHA256

c14092d313e4d5f6648610042321215d188bc57c7e26e96a46046fc38aab3c21
SHA512

94771b91c274221ce6952c1e05f806a7e884aae0fa975735495c0d7d872fe7269f6c73a30b30282828730c0cb337d1fd2beede0fb93bcadc3157f8523f0efc99
SSDEEP

384:4arGwSBu122gmfjjbGAXFXEmNWrMwW9ooxYYtRY48n8L2r/IvqRtDZZ+sl3qLCan:4arGBuNoAXRo47BI8sICRtNZw+X

Score

N/A

Malware Config

Signatures

Files

c14092d313e4d5f6648610042321215d188bc57c7e26e96a46046fc38aab3c21
.exe windows x86

f4ed347dce32cc25e9c7aebbdda1b80c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
IofCompleteRequest
memmove
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IoQueryDeviceDescription
RtlWriteRegistryValue
RtlUnicodeStringToAnsiString
IoAttachDeviceToDeviceStack
KeInitializeEvent
RtlAppendUnicodeToString
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
KeSetEvent
IoDeleteDevice
IoDetachDevice
MmMapIoSpace
MmUnmapIoSpace
KeWaitForSingleObject
_except_handler3
RtlQueryRegistryValues
ExFreePoolWithTag
IoCreateDevice
ExAllocatePoolWithTag

hal

WRITE_PORT_UCHAR
READ_PORT_UCHAR
WRITE_PORT_USHORT

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.klog
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4ed347dce32cc25e9c7aebbdda1b80c

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 256B - Virtual size: 254B

.data Size: 128B - Virtual size: 72B

INIT Size: 2KB - Virtual size: 1KB

.klog Size: 11KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 384B - Virtual size: 276B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 256B - Virtual size: 254B

.data
Size: 128B - Virtual size: 72B

INIT
Size: 2KB - Virtual size: 1KB

.klog
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 384B - Virtual size: 276B