Static task
static1
General
-
Target
04e94ec2e68cbc1a0e250603a740bfa7
-
Size
52KB
-
MD5
04e94ec2e68cbc1a0e250603a740bfa7
-
SHA1
dfca443761fa76b9e982fdbd3a1fc34759ef3eb1
-
SHA256
3e47ce2424f7b4a7a228e5c7397d21e8ca92f3b8246372883e5ba0386d848363
-
SHA512
7bca3f4c96053ea9771e1be78fed3463f5a7f6252cfab09401f6c1926a4acfa88a91cbd41924fea4861b6b6855e7e8ba06f04d9724a5304caf9acbe5fd72e4d9
-
SSDEEP
1536:IDIrirvZ0+V1pcZ+6CSTWJsmF/pOVC3YO:IDIrOS+LpcZ+6sr/rX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04e94ec2e68cbc1a0e250603a740bfa7
Files
-
04e94ec2e68cbc1a0e250603a740bfa7.sys windows:5 windows x86 arch:x86
50c48ac2c19b8dbd45a2becc35f2d906
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExFreePoolWithTag
KeInitializeEvent
memcpy
memset
IofCompleteRequest
IoFreeIrp
ZwClose
ObfDereferenceObject
DbgPrint
IoAllocateWorkItem
IofCallDriver
IoAttachDevice
IoDeleteDevice
IoFreeMdl
KeWaitForSingleObject
ObfReferenceObject
KeInitializeMutex
IoAllocateMdl
KeSetEvent
hal
ExAcquireFastMutex
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 514B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ