Static task
static1
General
-
Target
18e3dfee46735db2cd67c67d8164a0d2
-
Size
2KB
-
MD5
18e3dfee46735db2cd67c67d8164a0d2
-
SHA1
a7688c8aaede27c4d83008df918e66b9a0e07da9
-
SHA256
f019eb929377aa34c6bc8835e50363b5c84157b4d9250d0e3e8b5491b64afb9c
-
SHA512
10b96bacd6b394a75d1ff1dce701827be8347bd9394226f89e8f93ad3c461f28e8780515b546b5ce3335bfc26a136abd432015e8db3243883be2fd1e8a035c69
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18e3dfee46735db2cd67c67d8164a0d2
Files
-
18e3dfee46735db2cd67c67d8164a0d2.sys windows:5 windows x86 arch:x86
6801af3d170bb7060d90180f2022a1a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
DbgPrint
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
_except_handler3
IoCreateSymbolicLink
IoCreateDevice
Sections
.text Size: 640B - Virtual size: 540B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 324B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 104B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ