ba29866cbde65b68bd13d4e9ab79f3f0527d8ffe | Triage

Sharing

General

Target

ba29866cbde65b68bd13d4e9ab79f3f0527d8ffe
Size

1KB
MD5

704d2a24f6dbca7114f30eb60d85a971
SHA1

ba29866cbde65b68bd13d4e9ab79f3f0527d8ffe
SHA256

1466ad66841ee6317ebd2c41f7d18b799f8a6fdc460e35b3efda55aa2f33d369
SHA512

03286a7a6156435d7cfb75b61d83eb421f13fe892fe15676ff384d2979dab424f65b7483c64c0995d7f4a2763d3ca7b1cb538a57eac9e583abfa129c879314b8

Score

N/A

Malware Config

Signatures

Files

ba29866cbde65b68bd13d4e9ab79f3f0527d8ffe
.exe windows x86

a94f8faa78b398502ce6c362bc6011e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.rdata
Size: 256B - Virtual size: 150B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ