a03a73d6576e2d3769c0f0c0828b847a49a4179abedf8eda5792ffa6fbeb625e

General

Target

a03a73d6576e2d3769c0f0c0828b847a49a4179abedf8eda5792ffa6fbeb625e
Size

67KB
MD5

8a09b3bda2f00b716aad231cfd7ba614
SHA1

4d196457c115c09f8a4ff781e2559462f2267894
SHA256

a03a73d6576e2d3769c0f0c0828b847a49a4179abedf8eda5792ffa6fbeb625e
SHA512

d83c77183d9a845431a1ddc81bedcf02058b7c87aab9290cbb3576713ff9c4ff0d82d258117ddf5070636b14b3ab4bab0098c33ac1d2250794d70cd8254838d0
SSDEEP

1536:WuE8RvndxFnso4ov2ylfJAsS39HykN7b1bBP27VYQ2miY/:66nFn3nemJAz3lyM7bHPIH2md

Score

N/A

Malware Config

Signatures

Files

a03a73d6576e2d3769c0f0c0828b847a49a4179abedf8eda5792ffa6fbeb625e
.dll windows x86

aec1a79c29b0c8a61e96203a4a0dfa7d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

RtlDowncaseUnicodeString
KeInsertQueueApc
PoUnregisterSystemState
ExFreePool
IoRegisterLastChanceShutdownNotification
SeLockSubjectContext
FsRtlFreeFileLock
RtlFindLeastSignificantBit
PsJobType
memcpy
ExAllocatePool
IoWriteTransferCount
LdrAccessResource
CcSetAdditionalCacheAttributes
FsRtlDissectDbcs
RtlFillMemory
PoRegisterSystemState
IoCheckEaBufferValidity
MmProbeAndLockPages
RtlImageNtHeader

hal

HalReportResourceUsage
WRITE_PORT_USHORT
HalGetAdapter
HalAllocateAdapterChannel
HalSetDisplayParameters
HalReadDmaCounter
HalInitializeProcessor
HalReturnToFirmware
KeTryToAcquireQueuedSpinLockRaiseToSynch
IoFreeMapRegisters
HalRequestIpi
KeLowerIrql
KfAcquireSpinLock
HalInitSystem
HalFlushCommonBuffer
HalGetBusData
READ_PORT_BUFFER_UCHAR
READ_PORT_BUFFER_ULONG

Exports

Exports

RpaxvxTygagdwSziz
UpdfatkOryztkNt
JixHgni
MmLfqgt
SpfUntmhBmhllnXxs
TyyqqOe
UwWnazqjWrf
OssKtbjdIc
BvxZmeind
VptAcudyxrGfeeEaw
CqvxvhyXfy

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 38B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aec1a79c29b0c8a61e96203a4a0dfa7d

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 59KB - Virtual size: 139KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 38B

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 59KB - Virtual size: 139KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 38B