Static task
static1
General
-
Target
163eee500c898c3053e6f73371f8bd04
-
Size
2KB
-
MD5
163eee500c898c3053e6f73371f8bd04
-
SHA1
cf8965656c6576acf071b70226736be29e58a983
-
SHA256
14896eb5001ec7818e4422fc029e40e5aa32aad738f9026bc2162f2845577c62
-
SHA512
8c29a974be9c5a2168bfade30b85b35e08ca91d7bf208f0b651152cbb36722b2c1f44079b0b4b9c4656b300feead55144f148c5c5d0fd2cd064405c7cfdd5a2e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 163eee500c898c3053e6f73371f8bd04
Files
-
163eee500c898c3053e6f73371f8bd04.sys windows:5 windows x86 arch:x86
1a6e790f9d5c43023b9cead915209a52
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
IofCompleteRequest
IoDeleteDevice
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
_except_handler3
KeTickCount
Sections
.text Size: 768B - Virtual size: 732B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 374B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ