efe2846c1724e04e147d3e3ed510af0c38872b730e94141aced760cede5b8209

Sharing

Copy URL Twitter E-mail

General

Target

efe2846c1724e04e147d3e3ed510af0c38872b730e94141aced760cede5b8209
Size

406KB
MD5

3d9e6294ab0903de7126023ebd119e51
SHA1

00d58abf8905dad8ce561f9a9760a4da49bd8d6b
SHA256

efe2846c1724e04e147d3e3ed510af0c38872b730e94141aced760cede5b8209
SHA512

3dcb715c5619ca0b8b366fba2245e290bb4632b6337702ee64dbd77bd51e1ffecfde9f22f3c18ca43be6f7eb05a86336b7c6bfeb1ee6bb680d6876d20271c7c0
SSDEEP

12288:AETKRxmlUlSMSPJaBAw1XSQ3WdmAxTLC/:rMxmm2gAw113WdrC

Score

N/A

Malware Config

Signatures

Files

efe2846c1724e04e147d3e3ed510af0c38872b730e94141aced760cede5b8209
.exe windows x86

0d4836d6d98c182619e78eaf50f609d2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ObfDereferenceObject
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
ExAllocatePool
ExFreePool
NtQuerySystemInformation

hal

KeQueryPerformanceCounter

Sections

.text
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.s10
Size: - Virtual size: 882B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s11
Size: - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s12
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d4836d6d98c182619e78eaf50f609d2

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: - Virtual size: 5KB

.rdata Size: - Virtual size: 228B

.data Size: - Virtual size: 808B

.CRT Size: - Virtual size: 4B

INIT Size: - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 176B

.s10 Size: - Virtual size: 882B

.s11 Size: - Virtual size: 360KB

.s12 Size: 404KB - Virtual size: 403KB

.reloc Size: 512B - Virtual size: 232B

.text
Size: - Virtual size: 5KB

.rdata
Size: - Virtual size: 228B

.data
Size: - Virtual size: 808B

.CRT
Size: - Virtual size: 4B

INIT
Size: - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 176B

.s10
Size: - Virtual size: 882B

.s11
Size: - Virtual size: 360KB

.s12
Size: 404KB - Virtual size: 403KB

.reloc
Size: 512B - Virtual size: 232B