5a6b39a85a4b715b41ead1839ddbaa7edac399b3 | Triage

Sharing

General

Target

5a6b39a85a4b715b41ead1839ddbaa7edac399b3
Size

1KB
MD5

c7293bfaf1118915c0bc4eaba082ba93
SHA1

5a6b39a85a4b715b41ead1839ddbaa7edac399b3
SHA256

e2d99c683a70f71b5b68c41b66eae9eb2f019d44c96f63b21683408da303a396
SHA512

cf542301ca65870f4f8273721ca2f4fbb73cba66c2a14f7155f2860aad0a1480f26b143c9871bcdc3e675195c63b199cd1b6e1ad3989044ae2d6cd0c00901af7

Score

N/A

Malware Config

Signatures

Files

5a6b39a85a4b715b41ead1839ddbaa7edac399b3
.exe windows x86

a94f8faa78b398502ce6c362bc6011e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.rdata
Size: 256B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ