Static task
static1
General
-
Target
04778a76b08e8448dcfb66627e100d59
-
Size
18KB
-
MD5
04778a76b08e8448dcfb66627e100d59
-
SHA1
b5b359fe4090f442e7db6e0cdf60607955dce980
-
SHA256
e0a9e6ce90c312a5c5c596bacba863d3a38fdb1a1d07a43126bc33fa8e4e783a
-
SHA512
97641a2e29747bf2706479d5ecd95d50f35f4a1e9d92aa595e0e197b656f89d8a1e273797a40c3cbcd0f10f0a6f70bd6497454db4e52e7aaafaa95c8e10cbe5a
-
SSDEEP
96:zun4tDiCGZPE108cB4o4G1JYCh0ubdNJOpUn47sWG0MDVrUHDOf/lWJvF5U:ynKips104oj1RU3NgJUjkI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04778a76b08e8448dcfb66627e100d59
Files
-
04778a76b08e8448dcfb66627e100d59.sys windows:5 windows x86 arch:x86
f7596b8bb903209eb51a59f1da209fe2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwClose
ZwSetValueKey
wcslen
ZwOpenKey
RtlInitUnicodeString
ZwReadFile
ZwQueryInformationFile
ZwCreateFile
wcscat
mbstowcs
Sections
.text Size: 1024B - Virtual size: 1008B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 145B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 128B - Virtual size: 3B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 330B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ