cb6e576b38968187907754496b7d9805426a1802 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cb6e576b38968187907754496b7d9805426a1802
Size

1KB
MD5

85dc2e3b6273cf28c83e1119515e301e
SHA1

cb6e576b38968187907754496b7d9805426a1802
SHA256

39fca7d6f415a7c760362ad9f6d86ad9c2b2bc1cb60aaeb92790ffc1080d3452
SHA512

1440fc193d3893dc846cbed604c10a5c47f0a5be757fb4e679d0f5a9b6dcd0e2ee0f6a91a8d526acffd11a7d756ab282a4fae4e90dc5b661ae169ea4d4dd783d

Score

N/A

Malware Config

Signatures

Files

cb6e576b38968187907754496b7d9805426a1802
.exe windows x86

a94f8faa78b398502ce6c362bc6011e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.rdata
Size: 256B - Virtual size: 139B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 514B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ