Static task
static1
General
-
Target
6e2969ba36d2e27eccd4e6f2070eb34c
-
Size
21KB
-
MD5
6e2969ba36d2e27eccd4e6f2070eb34c
-
SHA1
c2355b14f9f5b43d583b749f088f37a42aef07ef
-
SHA256
d3ad5675c03d72c92f9b75a5f0f60dba7ba01c7d26d052be3f9f42142e2b08cf
-
SHA512
0a9115c4d11157102ee1160c4129057e66f9a0cfb4408fcbd09a14ff25927ff7bbc9e5268f543d74db0a13d93f699a627c1559cc9a6618007faf66e2605be96a
-
SSDEEP
384:C7qVDFOAIgplr4CuTgOK0Zk1Mu3NwjXegjQ8sKbhTE:Cu8dCVf0ZjuajXegj5sKbhT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e2969ba36d2e27eccd4e6f2070eb34c
Files
-
6e2969ba36d2e27eccd4e6f2070eb34c.sys windows:5 windows x86 arch:x86
fef871bb72be1125816675b79a88097c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmIsNonPagedSystemAddressValid
RtlLengthSid
RtlInitUnicodeString
ExAllocatePoolWithTag
ZwYieldExecution
MmGetSystemRoutineAddress
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 223B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ