Static task
static1
General
-
Target
6083abf7dce9e235ca8c571c1ae21888
-
Size
21KB
-
MD5
6083abf7dce9e235ca8c571c1ae21888
-
SHA1
ba5c2259f3c2e2538a0b26edf6c0b02b8848d607
-
SHA256
79fc301e5969e1a03028d820e314d2c96d4adb268503b57067d9ba100fb45127
-
SHA512
96aac7918a9822466cfd67055bdb75e54efa95d29c448d4eabd67a484c3999be91f2e9335d3968ef2fa5c91045f1140cfdfac28766c767e2e4f03aa6b6762773
-
SSDEEP
384:0+wR9FgMHOwaKoHBWl4Mhy/jso9uT+quEOjBMLk:07/gMFWH4y/jso5zMQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6083abf7dce9e235ca8c571c1ae21888
Files
-
6083abf7dce9e235ca8c571c1ae21888.sys windows:6 windows x86 arch:x86
303c65bcd9f1158f3d59ab42242a5598
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ataport.sys
AtaPortNotification
AtaPortWritePortUchar
AtaPortWritePortUlong
AtaPortGetPhysicalAddress
AtaPortConvertPhysicalAddressToUlong
AtaPortGetScatterGatherList
AtaPortReadPortUchar
AtaPortStallExecution
AtaPortGetParentBusType
AtaPortRequestCallback
AtaPortWritePortBufferUshort
AtaPortGetUnCachedExtension
AtaPortCompleteRequest
AtaPortMoveMemory
AtaPortCompleteAllActiveRequests
AtaPortReleaseRequestSenseIrb
AtaPortBuildRequestSenseIrb
AtaPortReadPortUshort
AtaPortReadPortBufferUshort
AtaPortInitialize
AtaPortGetDeviceBase
AtaPortDeviceStateChange
ntoskrnl.exe
KeTickCount
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 174B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1016B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 138B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ