c2f4b6ebe0f5bb1f7339dd0d42dd0dcf7d74e4deb483443f81655089f19c1abf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2f4b6ebe0f5bb1f7339dd0d42dd0dcf7d74e4deb483443f81655089f19c1abf
Size

2KB
MD5

f96f0e916a2ad40a72e6366cc9ff78e9
SHA1

9091c9352b2c6f96359c4e0bd7ccb6d15c6f3cb4
SHA256

c2f4b6ebe0f5bb1f7339dd0d42dd0dcf7d74e4deb483443f81655089f19c1abf
SHA512

7594af5e12d6f60aae373a7479d1c96478ca89535eb01f9ef7016fa9806920eefdbe03a66d531a13832370dbe96e22028d455967b05fa7533fa8d3ee405fc0eb

Score

N/A

Malware Config

Signatures

Files

c2f4b6ebe0f5bb1f7339dd0d42dd0dcf7d74e4deb483443f81655089f19c1abf
.exe windows x86

4edfd276e71f47012f7caa2851028913

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

IofCompleteRequest
ZwDeleteFile
RtlInitUnicodeString

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128B - Virtual size: 121B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 256B - Virtual size: 132B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ