3cad6a81874759237dd18933af37e54b

Sharing

Copy URL Twitter E-mail

General

Target

3cad6a81874759237dd18933af37e54b
Size

65KB
MD5

3cad6a81874759237dd18933af37e54b
SHA1

915ec62b362f27960cb1a3bd947439fadd0f66dc
SHA256

6d5fc9ae5c86321c64c3d2e82c528724ff518b4f56e3c7c9435afd42db23e03d
SHA512

d529a0ee450dbba7ab43631ebdabf1c1b450906508b381f772eac537c67d7a3a7636d4441e9a40c0b9902315fc528be752f4394508a45028fd3e0b0deb876d65
SSDEEP

1536:v2LCmAvtqfjFt/kHxLSJ6NtHKguSPfh+47Bm8l1:eLCmNz4xLDTJU47Bm8l1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cad6a81874759237dd18933af37e54b

Files

3cad6a81874759237dd18933af37e54b
.dll windows:5 windows x86 arch:x86

58812269b6891eee713506ee39a72125

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

ntoskrnl.exe

RtlInitString
RtlEqualUnicodeString
ExRegisterCallback
MmQuerySystemSize
SeTokenIsRestricted
RtlQueryRegistryValues
RtlUpcaseUnicodeString
IoRegisterDeviceInterface
RtlUnicodeToMultiByteN
KeWaitForMultipleObjects
RtlEqualString
ZwFreeVirtualMemory
RtlInitUnicodeString
FsRtlMdlWriteCompleteDev
KeInitializeDpc
RtlInitAnsiString
RtlHashUnicodeString
CcFastCopyWrite
RtlUpcaseUnicodeChar
RtlxAnsiStringToUnicodeSize
KeInitializeQueue
ObReferenceObjectByHandle

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idat
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ztest
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.stest
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.init
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.srdat
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58812269b6891eee713506ee39a72125

Headers

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 13KB - Virtual size: 12KB

.idat Size: 512B - Virtual size: 92B

.idata Size: 1024B - Virtual size: 658B

.ztest Size: 512B - Virtual size: 192B

.stest Size: 512B - Virtual size: 192B

.init Size: 10KB - Virtual size: 9KB

.srdat Size: 512B - Virtual size: 310B

.data Size: 2KB - Virtual size: 39KB

.rsrc Size: 21KB - Virtual size: 20KB

.reloc Size: 1024B - Virtual size: 556B

.text
Size: 13KB - Virtual size: 12KB

.idat
Size: 512B - Virtual size: 92B

.idata
Size: 1024B - Virtual size: 658B

.ztest
Size: 512B - Virtual size: 192B

.stest
Size: 512B - Virtual size: 192B

.init
Size: 10KB - Virtual size: 9KB

.srdat
Size: 512B - Virtual size: 310B

.data
Size: 2KB - Virtual size: 39KB

.rsrc
Size: 21KB - Virtual size: 20KB

.reloc
Size: 1024B - Virtual size: 556B