b4629b4173d51f4b15d7e35f8fd0cf29eeddcb50 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4629b4173d51f4b15d7e35f8fd0cf29eeddcb50
Size

1KB
MD5

d910fdf022442ce9fef624c6431ac735
SHA1

b4629b4173d51f4b15d7e35f8fd0cf29eeddcb50
SHA256

e5d2242a69f44c77e6eb45dea7dd432082ab7a04c27a54605a288f1fb7a8c81b
SHA512

f793c7696be71c57ed380ff62282204da35b328bd2ea6c39cf5f4d7f13bc27b03e596b286ff84e8cc691c74a56b30bd388b1a3604297e74eef568945f4d21621

Score

N/A

Malware Config

Signatures

Files

b4629b4173d51f4b15d7e35f8fd0cf29eeddcb50
.exe windows x86

a94f8faa78b398502ce6c362bc6011e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.rdata
Size: 256B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 474B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ