Static task
static1
General
-
Target
07f99e532ec9be5e820a1a36d466d4cd
-
Size
4KB
-
MD5
07f99e532ec9be5e820a1a36d466d4cd
-
SHA1
ff94a0df0b61f1ec50fbcd6517e49b2c0d0b58d8
-
SHA256
d177fac7634e5ddbe227cb5903e889da3d214de3fad2a36e1a8c52f21c7f7a58
-
SHA512
eb63282fdab2be9123e8c479cfa194367dc5b24ca19266f0c943916bd256fb827805a8f375e6f2faab3948fc7f3202bcc292e9da2a39779e2638e76914c985ef
-
SSDEEP
48:6N78qTfdy8dUdKdTKdQsWDbRDQD+DYHDRsWDMseD+eDFDIDyDAbHNVKrrTWLb0qc:e7UEsCbVkaGRsCV6+6BMmAbtRbl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 07f99e532ec9be5e820a1a36d466d4cd
Files
-
07f99e532ec9be5e820a1a36d466d4cd.sys windows:5 windows x86 arch:x86
4edfd276e71f47012f7caa2851028913
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
ZwDeleteFile
RtlInitUnicodeString
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 102B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 132B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 98B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ