a0707a413bfcf255277f5ea031d7178cfb2ff8bf4a70fa8cf139db4d102315bb

General

Target

a0707a413bfcf255277f5ea031d7178cfb2ff8bf4a70fa8cf139db4d102315bb
Size

22KB
MD5

610737d3d8be4f2212625f2f464646d9
SHA1

a4473ca4f2085ce15a138701629e918b596e49b0
SHA256

a0707a413bfcf255277f5ea031d7178cfb2ff8bf4a70fa8cf139db4d102315bb
SHA512

815fc2eb9fda0f99c2322b7547a4a4266a28ab0918d8c284172093d80500889fd772a4b5030195c2b89eecdd0d451d35b0ab2807617dac59c93ab0db08d1008e
SSDEEP

384:R8eUHZaZFz6gv1G4Jnj5rDMhgJZrcbZxRFdIhZFnFzEp2624YLQD22QZ:RQHw2M1Gsnj5rDMhgJZr6xRWFg2f4YLD

Score

N/A

Malware Config

Signatures

Files

a0707a413bfcf255277f5ea031d7178cfb2ff8bf4a70fa8cf139db4d102315bb
.exe windows x86

1f1435b1ef5e2b1488e6ce8c691c8b09

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

_wcsicmp
ExInterlockedAddLargeInteger
FsRtlUninitializeLargeMcb
CcSetLogHandleForFile
ZwQueryInformationProcess
RtlDeleteRange
ExInterlockedInsertTailList
RtlLookupElementGenericTableFull
ExFreePool
ExAllocatePool
IoAttachDeviceToDeviceStack
mbtowc
wcsncmp
PsGetVersion
memset
KeIsExecutingDpc
CcPrepareMdlWrite
KefReleaseSpinLockFromDpcLevel
ZwDeleteValueKey
KeAcquireSpinLockAtDpcLevel
ZwQueryInformationFile
MmUnmapViewOfSection
FsRtlCopyWrite
KeReleaseMutex
ExInitializePagedLookasideList
ZwDeleteKey
NtSetQuotaInformationFile
ZwQueryDefaultLocale

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ILIT
Size: 1024B - Virtual size: 614B

IMAGE_SCN_MEM_READ

.bac
Size: 512B - Virtual size: 260B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cab
Size: 512B - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1f1435b1ef5e2b1488e6ce8c691c8b09

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 1KB - Virtual size: 1KB

ILIT Size: 1024B - Virtual size: 614B

.bac Size: 512B - Virtual size: 260B

.cab Size: 512B - Virtual size: 52B

.data Size: 512B - Virtual size: 336B

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 512B - Virtual size: 28B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 1KB - Virtual size: 1KB

ILIT
Size: 1024B - Virtual size: 614B

.bac
Size: 512B - Virtual size: 260B

.cab
Size: 512B - Virtual size: 52B

.data
Size: 512B - Virtual size: 336B

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 512B - Virtual size: 28B