Static task
static1
General
-
Target
07c88711f8f746085af2f5bc9d5583fe
-
Size
70KB
-
MD5
07c88711f8f746085af2f5bc9d5583fe
-
SHA1
064d7b9332f6dbc7acfd19611973aa7246d61730
-
SHA256
a21e0dd7ad9518a37d747186939fc08b08d91359a25b5d6e602082313816c957
-
SHA512
d3ac23dd47cd214b49775f45c67b590ff0216095beb1bba9bb0defb67bdc28ef12b9350f04f29cb833bde5abba720cf30935ae7a18cf3274665623aa26da3ff6
-
SSDEEP
1536:CBU3Mqcz4kZUHK+/BJpcOxcsJDa3+e2WS3cX5GRXszK:u5nZUyycsJ+3+QMu5GRSK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07c88711f8f746085af2f5bc9d5583fe
Files
-
07c88711f8f746085af2f5bc9d5583fe.sys windows:4 windows x86 arch:x86
d24d6b9a560b06cdc772158b6cb7e8fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
memset
ExFreePoolWithTag
memcpy
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 173B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 128B - Virtual size: 110B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 896B - Virtual size: 840B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 384B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ