af2c5324eb868c19e5d94d07706800f8c17f8de75f2a278fb43e56b3e48f8ce6

Sharing

Copy URL Twitter E-mail

General

Target

af2c5324eb868c19e5d94d07706800f8c17f8de75f2a278fb43e56b3e48f8ce6
Size

76KB
MD5

34bcf9e0fdd61c2bc8ede253c4cc9254
SHA1

55af8a98091cee5a25638a847196de247d0ff3b3
SHA256

af2c5324eb868c19e5d94d07706800f8c17f8de75f2a278fb43e56b3e48f8ce6
SHA512

6026e2df2212ac8e7843479af2a56f8a5d439a410af785d3b41802364e9b05aa58ccdf88e57168edce6a4650c93091fbf820d2484800302c6c253ceeeac3d655
SSDEEP

1536:j1OnxwTZBXrKUR0G/CkOgBbK9RsMDt11x:jInxwDbJ09ZKyzDt1

Score

N/A

Malware Config

Signatures

Files

af2c5324eb868c19e5d94d07706800f8c17f8de75f2a278fb43e56b3e48f8ce6
.dll windows x86

7f86158fb25188d3426c41b284aecb4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlxUnicodeStringToAnsiSize
PsIsThreadTerminating
MmAllocateContiguousMemory
SeValidSecurityDescriptor
IoReportDetectedDevice
KeBugCheckEx
RtlDowncaseUnicodeString
RtlEqualUnicodeString
RtlFindClearBits
RtlRandom
ExSetTimerResolution
RtlEqualString
KeDelayExecutionThread
ZwQuerySymbolicLinkObject
IoFreeMdl
RtlInitString
ZwDeleteValueKey
RtlSetBits
RtlSetAllBits
ZwReadFile
RtlInitUnicodeString
ExDeletePagedLookasideList

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idat
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dir
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ahelp
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vdat
Size: 512B - Virtual size: 485B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f86158fb25188d3426c41b284aecb4e

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 12KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 40KB

.idat Size: 512B - Virtual size: 92B

.idata Size: 1024B - Virtual size: 626B

.dir Size: 512B - Virtual size: 28B

.ihelp Size: 512B - Virtual size: 140B

.ahelp Size: 512B - Virtual size: 140B

.init Size: 10KB - Virtual size: 9KB

.vdat Size: 512B - Virtual size: 485B

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 512B - Virtual size: 512B

.text
Size: 12KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 40KB

.idat
Size: 512B - Virtual size: 92B

.idata
Size: 1024B - Virtual size: 626B

.dir
Size: 512B - Virtual size: 28B

.ihelp
Size: 512B - Virtual size: 140B

.ahelp
Size: 512B - Virtual size: 140B

.init
Size: 10KB - Virtual size: 9KB

.vdat
Size: 512B - Virtual size: 485B

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 512B - Virtual size: 512B