0d95a09b102024a2c994049740416c8dd997fb5405f8e3be4f86b4a25d3a4087 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d95a09b102024a2c994049740416c8dd997fb5405f8e3be4f86b4a25d3a4087
Size

4KB
MD5

5d63003c860e13fa7bbce72d0113c00e
SHA1

8ed6aa6ecc08f228b7a332488d151ee0f9cfcb3b
SHA256

0d95a09b102024a2c994049740416c8dd997fb5405f8e3be4f86b4a25d3a4087
SHA512

1e1e1358c9bfeec876438e137c1d7f94506c68c7203b852359877783530452391217ee8273dabb3dbb0d2b344875feeb7676445b58a01402263a2ed96e68dd84
SSDEEP

48:i2CWWJ3lfT5VDyPV6HG+a3DQrHxm1DilOEv0A3c:wjGPVx6H+Dil3M

Score

N/A

Malware Config

Signatures

Files

0d95a09b102024a2c994049740416c8dd997fb5405f8e3be4f86b4a25d3a4087
.exe windows x86

a94f8faa78b398502ce6c362bc6011e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.rdata
Size: 256B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 474B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ