2cd94b9dc2280445e6ca74cd07f015f1fad7374f8574305c73105a3cf7165529

Sharing

Copy URL

Twitter E-mail

General

Target

2cd94b9dc2280445e6ca74cd07f015f1fad7374f8574305c73105a3cf7165529
Size

3.0MB
MD5

5a0e043589ad27ea36a4f240c4c022a4
SHA1

63ed04b1eef3e7080cefe0ac992a085636dcf128
SHA256

2cd94b9dc2280445e6ca74cd07f015f1fad7374f8574305c73105a3cf7165529
SHA512

aa2a7a9003f48f75459d7dfa29320e0c80b5d6e75b6617377c338dd945c86e7c467810b13dd3bc77ff9a3a410064481884dbb048de66d0febd9ee3f02b34edf3
SSDEEP

49152:wvfMkuP157vhbW3o1j24Kx6neQKBxXq/eycgwfvl1zPUWV0tXOEvSuPylfkNDzMr:4fMkaVvKxUeCglpqF5vSNlr7JeFD+3j

Score

1^/10

Malware Config

Signatures

Files

2cd94b9dc2280445e6ca74cd07f015f1fad7374f8574305c73105a3cf7165529
.exe windows x64

08bce1839abd3b5cf02663a914026022

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeSetPriorityThread
ExAllocatePool
NtQuerySystemInformation
ExFreePoolWithTag
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
KeQueryActiveProcessors
KeSetSystemAffinityThread
KeRevertToUserAffinityThread
DbgPrint

hal

KeStallExecutionProcessor
KeQueryPerformanceCounter

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 958B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mic0
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.mic1
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mic2
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

08bce1839abd3b5cf02663a914026022

Headers

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 312B

.pdata Size: 512B - Virtual size: 360B

INIT Size: 1024B - Virtual size: 958B

.mic0 Size: 1.3MB - Virtual size: 1.3MB

.mic1 Size: 1024B - Virtual size: 536B

.mic2 Size: 1.7MB - Virtual size: 1.7MB

.reloc Size: 512B - Virtual size: 288B

.rsrc Size: 1024B - Virtual size: 764B

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 312B

.pdata
Size: 512B - Virtual size: 360B

INIT
Size: 1024B - Virtual size: 958B

.mic0
Size: 1.3MB - Virtual size: 1.3MB

.mic1
Size: 1024B - Virtual size: 536B

.mic2
Size: 1.7MB - Virtual size: 1.7MB

.reloc
Size: 512B - Virtual size: 288B

.rsrc
Size: 1024B - Virtual size: 764B