Static task
static1
General
-
Target
10be1a16142962616f152bfb224a4d92
-
Size
10KB
-
MD5
10be1a16142962616f152bfb224a4d92
-
SHA1
3e32ed3b37692cf16e52d6588a446de8f0aa24a2
-
SHA256
9cf953b69bc154f090bd55f0d5b7af033d9dd711b929cb979f0ddd5f59737906
-
SHA512
2b691844fa52633d60be2642703ca1c44ec75ed19c9eb650935626b0cfb72daf966aa2f185bab24a32afa9da05b66a8a31c67d422da539b2e2a60d5b5aec55af
-
SSDEEP
96:qC1sVPT9bVkamRsCA6+6MV6GBbxV2V6BB7JdAuypbhcRj4GMu6UwCn/hlEFT:FsVPTCsHNDXVa4AuxR5MPU/hlER
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 10be1a16142962616f152bfb224a4d92
Files
-
10be1a16142962616f152bfb224a4d92.sys windows:5 windows x86 arch:x86
72f197251288499482bd7f5c49294372
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
ZwDeleteFile
DbgPrint
KeTickCount
RtlInitUnicodeString
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 242B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 158B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ