d7bdf8325a0658df55058fc884a5652c9c4dbadd | Triage

Sharing

General

Target

d7bdf8325a0658df55058fc884a5652c9c4dbadd
Size

1KB
MD5

52322813743ac976334ef1021c700fef
SHA1

d7bdf8325a0658df55058fc884a5652c9c4dbadd
SHA256

c60b14526bcd1292b94e65a58a5bb5ffd06cf5977e49cacaa4150a42057ff345
SHA512

1fb56ccf104cfe7c28b875f4e602b8dadbb7c94dd49f385613cb67e343ee528f32bd943a26a6cc9a7193fc5198f6f9786da0a08392ae31566c6e81a02cc97f33

Score

N/A

Malware Config

Signatures

Files

d7bdf8325a0658df55058fc884a5652c9c4dbadd
.exe windows x86

a94f8faa78b398502ce6c362bc6011e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.rdata
Size: 256B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 530B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ