91c92ca836bcf5bdca6832d14fd64b119a91f70971ef615d8c3186e8693493cd

Sharing

Copy URL Twitter E-mail

General

Target

91c92ca836bcf5bdca6832d14fd64b119a91f70971ef615d8c3186e8693493cd
Size

18KB
MD5

a2662fcb51e3879b99e5f68ccd301f20
SHA1

3049ca0954f62d7627f493425a059089d4846e04
SHA256

91c92ca836bcf5bdca6832d14fd64b119a91f70971ef615d8c3186e8693493cd
SHA512

b95e01eeb46f58ed40bbc3365cac715825fede1f18eedea1c805f260d9d4d071fca5167943dc519f921971d6ce0f42b390bf8c841ba3e68a74556abd803360f7
SSDEEP

192:jhcdrhJA23PuGvDQITGPK+ydpP/hUVSPbGSnsu5r0apBjS6OjGvP6MmIMUwOpSn:j8LB7QIscL/hUV1Snsu5VpBjbOjBMmtn

Score

N/A

Malware Config

Signatures

Files

91c92ca836bcf5bdca6832d14fd64b119a91f70971ef615d8c3186e8693493cd
.exe windows x86

a1e75b3cb8e5f63b4368609285f43497

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeQueryInterruptTime
IoCancelIrp
_alldiv
_allmul
ExQueueWorkItem
IoFreeIrp
memcpy
IoDetachDevice
KeInitializeGuardedMutex
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
memset
KeSetEvent
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
KeAcquireGuardedMutex
ZwClose
IoGetRelatedDeviceObject
ObReferenceObjectByHandle
IoFileObjectType
ZwCreateFile
InterlockedDecrement
InterlockedIncrement
PoCallDriver
PoStartNextPowerIrp
ExFreePool
ObfDereferenceObject
IoAllocateIrp
ObfReferenceObject
RtlCopyUnicodeString
ExAllocatePoolWithTag
IoGetDeviceInterfaces
IoRegisterPlugPlayNotification
KeTickCount
KeBugCheckEx
KeReleaseGuardedMutex
IofCallDriver
RtlCompareUnicodeString
IofCompleteRequest

battc.sys

BatteryClassStatusNotify
BatteryClassIoctl
BatteryClassInitializeDevice

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 289B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PAGE
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1e75b3cb8e5f63b4368609285f43497

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

battc.sys

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 289B

.data Size: 512B - Virtual size: 8B

PAGE Size: 4KB - Virtual size: 3KB

INIT Size: 1KB - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 512B - Virtual size: 426B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 289B

.data
Size: 512B - Virtual size: 8B

PAGE
Size: 4KB - Virtual size: 3KB

INIT
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 512B - Virtual size: 426B