Static task
static1
General
-
Target
41a6f908a4fdc4f9d86d2054130a7569
-
Size
4KB
-
MD5
41a6f908a4fdc4f9d86d2054130a7569
-
SHA1
9c895075ad1e8e89916243e3a1d7e08187950c74
-
SHA256
78651e94256bffb17d16015a4084ffe227c4fe145671bb14d2c23c4aa4bb1ae0
-
SHA512
14b51a4f612936ef225eee2b174f263db84f84b0fd8b404b2c5e643de25e5b703b9000b8b9501d6280ad706085cb5cf62e60e2b221cf4263d786c90c3bc2e40d
-
SSDEEP
48:AqDkLW8e02dmQNpqwPeLc0d4r4zk3Bs1FHJaRAZpYV:JkDe08mQPhCcafTsyp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 41a6f908a4fdc4f9d86d2054130a7569
Files
-
41a6f908a4fdc4f9d86d2054130a7569.sys windows:6 windows x86 arch:x86
3abc76be97d129094e89ef5312262abb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
ProbeForWrite
MmGetSystemRoutineAddress
RtlInitUnicodeString
IoDeleteDevice
IoDeleteSymbolicLink
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
RtlUnwind
KeBugCheckEx
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 386B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 146B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ