Static task
static1
General
-
Target
0b24a1ac8c73450a99d640bec05e0c4b
-
Size
29KB
-
MD5
0b24a1ac8c73450a99d640bec05e0c4b
-
SHA1
8a63a6a718ccdbf2cbbe0d26235296186baabcd5
-
SHA256
8172d359b7b21e511416e2d7581f9e3b35e4cd99eb2cb495a3857a5ecb54c212
-
SHA512
c5eabe787baaaf1469391e9c525c272fbfc2398175287fb487a498797293943a48fb5ec8e045dda29a34a3014639450edae7c794cb6c83b6a5c41b0a734519a1
-
SSDEEP
768:JtlNsOp6plaLpiNd2qTO+QIXHsgLCiO3fR:J1sdpwsrbaNIXMl3R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b24a1ac8c73450a99d640bec05e0c4b
Files
-
0b24a1ac8c73450a99d640bec05e0c4b.sys windows:4 windows x86 arch:x86
caed740047327835987440169debea21
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
PsGetCurrentProcessId
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64B - Virtual size: 35B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 96B - Virtual size: 86B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 64B - Virtual size: 46B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ