834a2cab3be30a0b500ee26384865e2cad380d2fabbc18c9522a4b17bbfd43b5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

834a2cab3be30a0b500ee26384865e2cad380d2fabbc18c9522a4b17bbfd43b5
Size

3KB
MD5

3180321dcae58862dac703d3b759af4f
SHA1

03ae4563f02c10bce1d78fccc8a5d296ad3f291f
SHA256

834a2cab3be30a0b500ee26384865e2cad380d2fabbc18c9522a4b17bbfd43b5
SHA512

b52fe826da01b59fdf6bca3d0987d7277e47d7d60926be9eb6ad7ce2fc0da89513b22242f0b320e9e4008336b7223372cd704619ede470c7aa8d46e7abb82b57

Score

N/A

Malware Config

Signatures

Files

834a2cab3be30a0b500ee26384865e2cad380d2fabbc18c9522a4b17bbfd43b5
.exe windows x86

6efe84eb3feb20e22ad5e9613b0542a5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwSetValueKey
wcslen
ZwOpenKey
RtlInitUnicodeString
ZwReadFile
ZwQueryInformationFile
ZwCreateFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 994B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ