78b046a26a7a9a01f3409bde3942f38c2e817fe1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78b046a26a7a9a01f3409bde3942f38c2e817fe1
Size

1KB
MD5

e329a5c79f0fff574053007cdac7a1d6
SHA1

78b046a26a7a9a01f3409bde3942f38c2e817fe1
SHA256

060b8ce1bd51dd6389b9f0ce8bb02291849e49504d51a484d1d1eb5b91613aaf
SHA512

90d37e196bb9120ee28eb236b590d62793a5663a7c4d2f3303659736c6a8f89e5c75551e184356411db8565acab2d82c133616d3f87258e1a639797705d3f705

Score

N/A

Malware Config

Signatures

Files

78b046a26a7a9a01f3409bde3942f38c2e817fe1
.exe windows x86

a94f8faa78b398502ce6c362bc6011e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.rdata
Size: 256B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 474B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ