86a453bb327c1d95fc50ad7b97a416b43261d86e024779411532a345656b55bf

Sharing

Copy URL Twitter E-mail

General

Target

86a453bb327c1d95fc50ad7b97a416b43261d86e024779411532a345656b55bf
Size

2.4MB
MD5

1a7cc0747fe63948e09a84f419eb2ffa
SHA1

332a4878a5de1ba54937fb55eb40d48c8f39274e
SHA256

86a453bb327c1d95fc50ad7b97a416b43261d86e024779411532a345656b55bf
SHA512

1db3a05148400b87e2bd80ef5f63b83e7b2b180ddbc8d30e0b2eaa572d1a6033aaf16f5d1a37c94684d597da6e54ac1497d5614e89314241e2905adac7b007ed
SSDEEP

49152:lP+qdQ8X43bdeCHBlD62vXhapWr0WAW818xsy+bw:lPh/X43bkChlDXRapg5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86a453bb327c1d95fc50ad7b97a416b43261d86e024779411532a345656b55bf

Files

86a453bb327c1d95fc50ad7b97a416b43261d86e024779411532a345656b55bf
.exe windows x64

7cd285ce0724f8dcb919206d71104040

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

wcsstr
ExAllocatePool
NtQuerySystemInformation
ExFreePoolWithTag
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
KeQueryActiveProcessors
KeSetSystemAffinityThread
KeRevertToUserAffinityThread
DbgPrint

hal

KeQueryPerformanceCounter

Sections

.text
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

zxcasdda
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

zxcasdda
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zxcasdda
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7cd285ce0724f8dcb919206d71104040

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: - Virtual size: 9KB

.rdata Size: - Virtual size: 1KB

.data Size: - Virtual size: 112B

.pdata Size: - Virtual size: 336B

INIT Size: - Virtual size: 1KB

zxcasdda Size: - Virtual size: 1.3MB

zxcasdda Size: 512B - Virtual size: 8B

zxcasdda Size: 2.4MB - Virtual size: 2.4MB

.reloc Size: 512B - Virtual size: 184B

.text
Size: - Virtual size: 9KB

.rdata
Size: - Virtual size: 1KB

.data
Size: - Virtual size: 112B

.pdata
Size: - Virtual size: 336B

INIT
Size: - Virtual size: 1KB

zxcasdda
Size: - Virtual size: 1.3MB

zxcasdda
Size: 512B - Virtual size: 8B

zxcasdda
Size: 2.4MB - Virtual size: 2.4MB

.reloc
Size: 512B - Virtual size: 184B