f4233904cc7e33322a059be2afb13caa03aeb203cc841999602bded22f7f6526

General

Target

f4233904cc7e33322a059be2afb13caa03aeb203cc841999602bded22f7f6526
Size

47KB
MD5

185a396b71838a26fb023304e24ca00c
SHA1

46d16dbfded894a8aef5b6c9546f6ce7245ab7ac
SHA256

f4233904cc7e33322a059be2afb13caa03aeb203cc841999602bded22f7f6526
SHA512

af71b93a4214f73f25131e69a8c7f71f647a2564e8f8e191fbd7955592b3acae61d6e25167528b9f529528212bc54e844decb3cdebe90d520fb257d57c44ff50
SSDEEP

768:EtE6T0c35dzCNSqE+EOTlSyVYBwYkP+agclmVtuaCbcEb9iGyjT4Ep:L6T0cJVCNS7OTE+YCY2Jgp7Cb3bVyjcg

Score

N/A

Malware Config

Signatures

Files

f4233904cc7e33322a059be2afb13caa03aeb203cc841999602bded22f7f6526
.dll windows x86

9636eca2839c0349e32b0742ab524434

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlLengthSecurityDescriptor
IoIsValidNameGraftingBuffer
RtlCopyString
ExFreePool
ObCheckObjectAccess
RtlInitializeGenericTable
memcpy
KeReadStateQueue
ExAllocatePool
RtlImageNtHeader

classpnp.sys

ClassSetMediaChangeState
ClassIoCompleteAssociated
ClassReadDriveCapacity
ClassAsynchronousCompletion
ClassSendSrbAsynchronous
ClassInitializeSrbLookasideList
ClassModeSense

hal

ExAcquireFastMutex
HalGetInterruptVector
KeRaiseIrqlToSynchLevel
KeAcquireQueuedSpinLockRaiseToSynch
HalGetBusData
KeRaiseIrqlToDpcLevel
READ_PORT_BUFFER_UCHAR
WRITE_PORT_ULONG
HalReadDmaCounter
HalSetEnvironmentVariable
HalRequestSoftwareInterrupt
HalStopProfileInterrupt
HalAcquireDisplayOwnership
READ_PORT_BUFFER_ULONG
KeAcquireQueuedSpinLock
HalAllocateCrashDumpRegisters
KeAcquireSpinLock
WRITE_PORT_BUFFER_UCHAR
WRITE_PORT_USHORT

Exports

Exports

Wsdmlkb
KjtigbNwnkevt
MuUvziuZnx
IiuRgcbtEclwrFx
YzqsRumjveqXdl
NngaJvxvrlk
FewvaOfgkpIjgcOb
PjpcqzzUehstwfXckyIn
RqOxilwz

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 38KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9636eca2839c0349e32b0742ab524434

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

classpnp.sys

hal

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 38KB - Virtual size: 102KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 38B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 38KB - Virtual size: 102KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 38B