193f0b460a92b57301d7dbaf25b5a3525111b7b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

193f0b460a92b57301d7dbaf25b5a3525111b7b3
Size

1KB
MD5

217f5849525b5717812b94b45f998467
SHA1

193f0b460a92b57301d7dbaf25b5a3525111b7b3
SHA256

9d3eb5d381ae92836086773a6eef724ceedf9dd2fee8bc44d959fe35f471cf35
SHA512

17dfd9d9542a250bfd6a074eafb1ce999e1988e21c310d34b36d3431b762d4c5f5b0fdc03026c53084bf504491513adc9621d5c703a37564a9283e3ed634a6fe

Score

N/A

Malware Config

Signatures

Files

193f0b460a92b57301d7dbaf25b5a3525111b7b3
.exe windows x86

a94f8faa78b398502ce6c362bc6011e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.rdata
Size: 256B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 474B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ