Static task
static1
General
-
Target
d9fbab8fabb9423670d822a8f1589941b50b7e6fba3d58513fe63318466fd0fd
-
Size
21KB
-
MD5
b21530e5ccddbdbd327264e7edb3033d
-
SHA1
8fc2564c4e3536e6b96a4eda805acd1790bd3668
-
SHA256
d9fbab8fabb9423670d822a8f1589941b50b7e6fba3d58513fe63318466fd0fd
-
SHA512
a38b8fcc0090c4ed476a9b5cd1a1af2b19cddeedafb4603a56010819e224bb551eea5647bc61aa527c22da1f88f6f9be05ab1970230b127870aa33dbd5002bf2
-
SSDEEP
384:a0yPWsfthmmZBaopx6sXAsJEY0HUwpvh4zMKOaizeJ1PfW:hy+sfcYpqYCbh4Y36R+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d9fbab8fabb9423670d822a8f1589941b50b7e6fba3d58513fe63318466fd0fd
Files
-
d9fbab8fabb9423670d822a8f1589941b50b7e6fba3d58513fe63318466fd0fd.sys windows:6 windows x64
94c6af2e46032afdd1b9b8b69c7f0cf8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
ntoskrnl.exe
RtlCompareMemory
IoWMIRegistrationControl
swprintf
ObfDereferenceObject
MmGetSystemRoutineAddress
MmMapIoSpace
IoGetDmaAdapter
KeAcquireSpinLockRaiseToDpc
KeReleaseSpinLock
KeSetEvent
KeBugCheckEx
RtlCopyUnicodeString
ExFreePoolWithTag
IoWMIWriteEvent
ExAllocatePoolWithTag
MmUnmapIoSpace
RtlInitUnicodeString
wdfldr.sys
WdfVersionBindClass
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 848B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ