94d48ce45c3fee64237e5a04a8c17911e5ffb784 | Triage

Sharing

General

Target

94d48ce45c3fee64237e5a04a8c17911e5ffb784
Size

1KB
MD5

02b6fdbdc7556bf18e0620046a19db86
SHA1

94d48ce45c3fee64237e5a04a8c17911e5ffb784
SHA256

bdeb43808322beb33a7fb99ea280d9318b84ee7542b4457c488e83976ecb04b9
SHA512

61976e5cf880638f4b222c9026e581436afa35af482a5501b1df667143e840efde424ae7de6baee25efbd8e8235840e6b618127cfb287a5a600a25d9676d153e

Score

N/A

Malware Config

Signatures

Files

94d48ce45c3fee64237e5a04a8c17911e5ffb784
.exe windows x86

a94f8faa78b398502ce6c362bc6011e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.rdata
Size: 256B - Virtual size: 131B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 768B - Virtual size: 722B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ