3c001525da1a73f7a4c6b4ca1d6bcbf8

General

Target

3c001525da1a73f7a4c6b4ca1d6bcbf8
Size

183KB
MD5

3c001525da1a73f7a4c6b4ca1d6bcbf8
SHA1

4501bca76a2788e4ad0320a0234464669e20cb92
SHA256

1e836da9ee1e8c8e9cfe14300462a8d1b27f4a11e12c54025498949d4d33b568
SHA512

4c83e656f6c2cf735451ecbbfa4aaf61cda296090c9b06a4c58af4d11464c35cf961e8f29109c5dda04c4353a00aa0bef698a67403ad00c41e575978daf2c947
SSDEEP

3072:+3RFFSgCeVYkzbQ+Idue1Cgx7uVW0egfexWlyK4yOTFO+HLJJedbVTQiJTfZl:iRyWVJzb/Iduely4gACyZTFOELDqTJr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c001525da1a73f7a4c6b4ca1d6bcbf8

Files

3c001525da1a73f7a4c6b4ca1d6bcbf8
.dll windows:5 windows x86 arch:x86

62e97d676126b9ffb84af66d535063bb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

hal

KeFlushWriteBuffer

ntoskrnl.exe

DbgBreakPointWithStatus
KeRundownQueue
PsGetVersion
MmQuerySystemSize
PsGetThreadProcessId
ObfReferenceObject
IoIsSystemThread
ExLocalTimeToSystemTime
RtlCopyUnicodeString
IoSetHardErrorOrVerifyDevice
KeInitializeEvent
IoGetAttachedDeviceReference
KeInsertByKeyDeviceQueue
FsRtlIsTotalDeviceFailure
KeSetEvent
MmSetAddressRangeModified
KeReadStateSemaphore
RtlInitString
ExSetResourceOwnerPointer
IofCompleteRequest
ZwCreateSection
ZwCreateKey
IoGetDeviceInterfaces
KeResetEvent
ZwCreateFile
RtlSetBits
RtlTimeToTimeFields
PoSetPowerState
RtlMapGenericMask
FsRtlAllocateFileLock
IoCreateDisk
PsGetCurrentProcess
IoAllocateAdapterChannel
RtlIsNameLegalDOS8Dot3
ExIsProcessorFeaturePresent
IoFreeMdl
PoUnregisterSystemState
CcUnpinData
IoGetStackLimits
IoStartNextPacket
FsRtlNotifyUninitializeSync
ExSystemTimeToLocalTime
KeGetCurrentThread
IoGetTopLevelIrp
IoGetDiskDeviceObject

Exports

Exports

?HideTaskAppNameDeviceOriginal@@ADKPA_N<V
?CancelFolderMutexObjectThreadExW@@ADKMK<V
?FindAnchorStringKeyNameA@@ADHJFMK<V
?GetDeviceStringMutantExpressionA@@ADMFPAHK<V
?PutSystemPointerSemaphoreTextOld@@ADFF<V
?OnSizeWindowInfoVersionOld@@ADGPAGFPAI<V

Sections

.text
Size: 39KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

62e97d676126b9ffb84af66d535063bb

Headers

File Characteristics

Imports

hal

ntoskrnl.exe

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 58KB

.edata Size: 512B - Virtual size: 352B

.data Size: 22KB - Virtual size: 21KB

.text
Size: 39KB - Virtual size: 58KB

.edata
Size: 512B - Virtual size: 352B

.data
Size: 22KB - Virtual size: 21KB