98ec7ef1f7068481a9c7d91a170c0035f270fd7f407c85d07b7ddbc8b9f430e9

General

Target

98ec7ef1f7068481a9c7d91a170c0035f270fd7f407c85d07b7ddbc8b9f430e9
Size

129KB
MD5

1e347f16158ce0861865d526d76a3828
SHA1

6fc5e05b2bec2d82c070d6b6e62e4a7633319ac9
SHA256

98ec7ef1f7068481a9c7d91a170c0035f270fd7f407c85d07b7ddbc8b9f430e9
SHA512

f569ed8f3a2b9b3ea19f58ee321d39c08dafe308a99f5682392a782e47c7f39a5fec017ca72c95834f7783e128f8a981d67895efc3eb229fbda1a6709c7bc041
SSDEEP

3072:U8AI1iQ7iVR0HND2O0plNazZ9B6q1v5TGpd998Jn2de+2/:Uk1f7+RyB0pnaIK5Tie2A+2

Score

N/A

Malware Config

Signatures

Files

98ec7ef1f7068481a9c7d91a170c0035f270fd7f407c85d07b7ddbc8b9f430e9
.exe windows x86

78003bf7e1b088158d48b6279445c5a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeBugCheckEx
KeWaitForSingleObject
KeInitializeEvent
IofCompleteRequest
IoDeleteDevice
PoCallDriver
IoFreeIrp
ObfDereferenceObject
IoDetachDevice
IoFreeMdl
ExFreePool
IoQueueWorkItem
IoBuildDeviceIoControlRequest
IoFreeWorkItem
ObReferenceObjectByHandle
IoRegisterDeviceInterface
PoRequestPowerIrp
RtlInitAnsiString
IoDeleteSymbolicLink
KeResetEvent
RtlAppendUnicodeToString
ZwCreateKey
IoCreateSymbolicLink
IoReleaseRemoveLockAndWaitEx
_vsnprintf
ExDeleteNPagedLookasideList
IoAcquireCancelSpinLock
ZwQuerySystemInformation
KeRemoveQueueDpc
IoGetDeviceObjectPointer
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 1024B - Virtual size: 874B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 506B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78003bf7e1b088158d48b6279445c5a7

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 98KB - Virtual size: 97KB

.rdata Size: 512B - Virtual size: 132B

.data Size: 27KB - Virtual size: 27KB

INIT Size: 1024B - Virtual size: 874B

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 512B - Virtual size: 506B

.text
Size: 98KB - Virtual size: 97KB

.rdata
Size: 512B - Virtual size: 132B

.data
Size: 27KB - Virtual size: 27KB

INIT
Size: 1024B - Virtual size: 874B

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 512B - Virtual size: 506B