Static task
static1
General
-
Target
14517dba7702fd46287a081898a88c23
-
Size
14KB
-
MD5
14517dba7702fd46287a081898a88c23
-
SHA1
6a85612ce461efa13260672f8fa00f8e9bcdeab9
-
SHA256
f3a644eb2f0f5e28d0686da79abe108d121fbacd989eaa69d6d5fb9a63ded774
-
SHA512
c869b062281a8a76c4a1052b358987f6584da4a70fb3be9b4c9711ddee07a669fb3108a7768940a712b4cc3bd65120e9b0a23478625a26518519991d6adde694
-
SSDEEP
192:Ydv1t2nASGK9ucHt7xqY/p87vPxwz+Bwq3:A1t2nASGK48tldpWvP2+Bw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14517dba7702fd46287a081898a88c23
Files
-
14517dba7702fd46287a081898a88c23.sys windows:5 windows x86 arch:x86
ee06518f6fdf76ddee9bf1f4704106b3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoFreeMdl
MmUnmapLockedPages
ZwMapViewOfSection
PsGetVersion
sprintf
tolower
MmUnlockPages
MmMapLockedPagesSpecifyCache
MmProbeAndLockPages
IoAllocateMdl
ObfDereferenceObject
ZwAllocateVirtualMemory
RtlInitUnicodeString
ObReferenceObjectByHandle
MmSectionObjectType
ZwPulseEvent
MmMapLockedPages
MmBuildMdlForNonPagedPool
MmCreateMdl
KeServiceDescriptorTable
_except_handler3
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 216B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 640B - Virtual size: 570B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 326B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ