02f8e648f3c6686197f3dc0f456bada57ca15b96 | Triage

Sharing

General

Target

02f8e648f3c6686197f3dc0f456bada57ca15b96
Size

1KB
MD5

089607f7999ec86705d562d24d9a2227
SHA1

02f8e648f3c6686197f3dc0f456bada57ca15b96
SHA256

67a79b3caa583db95d3d9c35e9967e298d1065e84a374ad2b781d7581021b154
SHA512

7232bcdc18c557d8bfceb2329252767b05e59caab068253aa223167c4ca6c279c3395cdca12d515279e94646b8c4c1bc168d7b1402dc6bd95924cbc01fcf0522

Score

N/A

Malware Config

Signatures

Files

02f8e648f3c6686197f3dc0f456bada57ca15b96
.exe windows x86

a94f8faa78b398502ce6c362bc6011e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag

Sections

.rdata
Size: 256B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

PAGE
Size: 128B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

INIT
Size: 640B - Virtual size: 546B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 128B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ