Static task
static1
General
-
Target
0c4e11e418b1e2b042e729fa2db59fe4
-
Size
101KB
-
MD5
0c4e11e418b1e2b042e729fa2db59fe4
-
SHA1
f1aab5850838b3b800c78af2841f06176ccce31f
-
SHA256
5b71e72fd6c7076e7be94194d0deda14499325c7e5e1b7b6724a1f412dacfeda
-
SHA512
3c14d7b71fbe12c4604a23f442ff6202bfe18fa38bfb60dae7d76aeec1d2cf99f286b9a46e77449ba03bcd2aaffeece887adb5342b7520ebae6692731d76cdaf
-
SSDEEP
1536:Z098iNRPY+z0miDQpbYSfULxYVEUfWJ7UsL0WJ+RJYD1Fiq:ZA5yCbi8bYuUmGTwHwiq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c4e11e418b1e2b042e729fa2db59fe4
Files
-
0c4e11e418b1e2b042e729fa2db59fe4.sys windows:5 windows x86 arch:x86
16d1d229d12a29c6fab8b18ea4810a18
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoAttachDevice
IoFreeWorkItem
ZwClose
KeSetEvent
DbgPrint
IoFreeMdl
KeInitializeDpc
IoAllocateIrp
IoFreeIrp
ExFreePoolWithTag
memset
IoDeleteDevice
IoAllocateMdl
KeInitializeEvent
ObfDereferenceObject
memcpy
IofCallDriver
hal
ExReleaseFastMutex
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 234B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ