Static task
static1
Target
09d0589628a84219c226ebe055fce1b2
Size
133KB
MD5
09d0589628a84219c226ebe055fce1b2
SHA1
baf2bc14175b288f52f468608daf90309ed81cac
SHA256
51949a8138644a56d2177d3a9006bca7cfaa404066c77cc66003382031efc8f1
SHA512
3ca5ce8b164888e8a4d88aa509ffd41a6723ae7d1228156877790ffa3bfe5bbf87e2629e8da31fa9e1e0a471e6e050c82ec1891c960e7f61e0cf081e230d22fa
SSDEEP
3072:32cRXWgLqkL0FOipXtUY29XgbjrvyPQzjPE:39WVO2aYui3vyofE
Checks for missing Authenticode signature.
| resource |
|---|
| 09d0589628a84219c226ebe055fce1b2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
_stricmp
IoGetCurrentProcess
IoDeleteDevice
MmGetSystemRoutineAddress
RtlInitUnicodeString
wcscpy
ExFreePoolWithTag
ZwReadFile
ExAllocatePoolWithTag
ZwClose
ZwQueryInformationFile
ZwOpenFile
ZwQueryValueKey
ZwOpenKey
PsCreateSystemThread
ZwWriteFile
ZwCreateFile
wcscat
PsGetVersion
strncmp
ZwMapViewOfSection
ZwCreateSection
ZwUnmapViewOfSection
IoDeleteSymbolicLink
PsSetCreateProcessNotifyRoutine
IofCompleteRequest
KeWaitForSingleObject
MmUnlockPages
KeInsertQueueApc
KeInitializeApc
KeInitializeEvent
KeUnstackDetachProcess
MmMapLockedPagesSpecifyCache
KeStackAttachProcess
IoFreeMdl
MmProbeAndLockPages
IoAllocateMdl
_except_handler3
KeSetEvent
ZwAllocateVirtualMemory
KeClearEvent
IoCreateNotificationEvent
ObfDereferenceObject
PsLookupProcessByProcessId
IoCreateDevice
?InitPK10@@YGHXZ
?InitPK11@@YGHXZ
?InitPK12@@YGHXZ
?InitPK13@@YGHXZ
?InitPK14@@YGHXZ
?InitPK15@@YGHXZ
?InitPK16@@YGHXZ
?InitPK17@@YGHXZ
?InitPK18@@YGHXZ
?InitPK19@@YGHXZ
?InitPK1@@YGHXZ
?InitPK20@@YGHXZ
?InitPK21@@YGHXZ
?InitPK22@@YGHXZ
?InitPK23@@YGHXZ
?InitPK24@@YGHXZ
?InitPK25@@YGHXZ
?InitPK2@@YGHXZ
?InitPK3@@YGHXZ
?InitPK4@@YGHXZ
?InitPK5@@YGHXZ
?InitPK6@@YGHXZ
?InitPK7@@YGHXZ
?InitPK8@@YGHXZ
?InitPK9@@YGHXZ
?InitPK@@YGHXZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ