Static task
static1
General
-
Target
026364e887de086b524288a8165c6699684af04aa3e4c97902979a620e4e1e66
-
Size
20KB
-
MD5
a406fbdbeada4677fd1332f0fc7fa0e5
-
SHA1
b8a3cefb4a2f15d1cb0565df8cf9592fb314f779
-
SHA256
026364e887de086b524288a8165c6699684af04aa3e4c97902979a620e4e1e66
-
SHA512
ba6c83dc92864472ef6a91aa402d6eb7a802f3be86969500d796d636204bbdfeae56cc3d3f9c6e98f72f4042dc5741ac9723d114c5089282fef8cb59d03ac867
-
SSDEEP
384:m+LQsjOUuhDeHh1tJFn2O930NiHIYmaRqFCp/tp:msQWruhD60Nizht
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 026364e887de086b524288a8165c6699684af04aa3e4c97902979a620e4e1e66
Files
-
026364e887de086b524288a8165c6699684af04aa3e4c97902979a620e4e1e66.sys windows:10 windows x86
d94623bc2cc4224c52d7158097ac6399
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
WRITE_REGISTER_ULONG
WRITE_REGISTER_BUFFER_UCHAR
WRITE_REGISTER_BUFFER_USHORT
WRITE_REGISTER_BUFFER_ULONG
KeClearEvent
KeWaitForSingleObject
MmBuildMdlForNonPagedPool
MmMapLockedPagesSpecifyCache
IoAllocateMdl
READ_REGISTER_BUFFER_ULONG
KePulseEvent
KeBugCheckEx
RtlUnwind
RtlCopyUnicodeString
MmMapIoSpace
MmUnmapIoSpace
KeSetEvent
MmAllocatePagesForMdlEx
MmGetPhysicalAddress
READ_REGISTER_BUFFER_USHORT
READ_REGISTER_BUFFER_UCHAR
memset
IoFreeMdl
KeInitializeEvent
wdfldr.sys
WdfVersionBindClass
WdfVersionUnbind
WdfVersionBind
WdfVersionUnbindClass
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ