Static task
static1
General
-
Target
044b26e5a7773bd14dca26da4bf145aa
-
Size
19KB
-
MD5
044b26e5a7773bd14dca26da4bf145aa
-
SHA1
be0838993e4a796f72e7574ac9ef82fc6638bf20
-
SHA256
a79b2ed03a956abf4db9b41e0499ef8bf9d43139ad79479d9a55659457ace803
-
SHA512
a4aa46d0bfc2beb3807c06c07ebf4557f0822ce4875ed61a43e0c6625d17d11685406c1226c443222ae20568fcb33ae863266995e067de6ff6984544ba0bbf08
-
SSDEEP
96:atDesr1cYsk2zKtCmh6WGCh0u7dfOu/YZ8BP7aLY2dE9Jvuju:Ae81cYBUKdh6eBw8RGY2dEXmj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 044b26e5a7773bd14dca26da4bf145aa
Files
-
044b26e5a7773bd14dca26da4bf145aa.sys windows:5 windows x86 arch:x86
2f9cceec59682c7c9072c136c25106ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwClose
ZwSetValueKey
wcslen
ZwOpenKey
RtlInitUnicodeString
ZwReadFile
ZwQueryInformationFile
ZwCreateFile
wcscat
mbstowcs
_stricmp
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 145B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 128B - Virtual size: 3B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 358B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ