9c5f6a7a9ef9ad455803cc4ba56872bf1cae5417c44111ecc8ad83acdd12d15e

General

Target

9c5f6a7a9ef9ad455803cc4ba56872bf1cae5417c44111ecc8ad83acdd12d15e
Size

22KB
MD5

10e9cf48f7f1a39f974516af136c35fa
SHA1

9ced513881cdeacd7f69463d9c57208b6c072936
SHA256

9c5f6a7a9ef9ad455803cc4ba56872bf1cae5417c44111ecc8ad83acdd12d15e
SHA512

ef9def43b1e3035cea47cb0a8a6b7e218025b83f8e54377d05fc235ee351f9fd51a448496a67325bd2bc402866b4104551323479415d3ac793bf317ae77e3fd0
SSDEEP

384:Zfhm9M8GAcQLubGAXFXEmqaUImWBVMshpPjQ7Etf3sfBxZjyHaUImWB:ZfhyMiBAXRisVMsvjQeixZmds

Score

N/A

Malware Config

Signatures

Files

9c5f6a7a9ef9ad455803cc4ba56872bf1cae5417c44111ecc8ad83acdd12d15e
.exe windows x86

f4ed347dce32cc25e9c7aebbdda1b80c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlInitUnicodeString
IofCompleteRequest
memmove
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IoQueryDeviceDescription
RtlWriteRegistryValue
RtlUnicodeStringToAnsiString
IoAttachDeviceToDeviceStack
KeInitializeEvent
RtlAppendUnicodeToString
IofCallDriver
PoCallDriver
PoStartNextPowerIrp
KeSetEvent
IoDeleteDevice
IoDetachDevice
MmMapIoSpace
MmUnmapIoSpace
KeWaitForSingleObject
_except_handler3
RtlQueryRegistryValues
ExFreePoolWithTag
IoCreateDevice
ExAllocatePoolWithTag

hal

WRITE_PORT_UCHAR
READ_PORT_UCHAR
WRITE_PORT_USHORT

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ylty
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 384B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4ed347dce32cc25e9c7aebbdda1b80c

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 256B - Virtual size: 254B

.data Size: 128B - Virtual size: 72B

INIT Size: 2KB - Virtual size: 1KB

.ylty Size: 10KB - Virtual size: 10KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 384B - Virtual size: 276B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 256B - Virtual size: 254B

.data
Size: 128B - Virtual size: 72B

INIT
Size: 2KB - Virtual size: 1KB

.ylty
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 384B - Virtual size: 276B