Static task
static1
General
-
Target
1abd75d73f33a120acf589506569430c
-
Size
4KB
-
MD5
1abd75d73f33a120acf589506569430c
-
SHA1
e132b0756fdd52e1ba772ad5bc345ed7878ae5c2
-
SHA256
063aec9a73b79627d64941767b47d98aa5988e2b9f39d5ed025e4d95ff464626
-
SHA512
8077e467611d64d235697438aa31cac831866b6f0fb6c4cc9d2d2655218e42503743c28f075face59740d561a218ff3442af5379b9050dac2caecd76f627ec61
-
SSDEEP
96:sqR4q5xJ1tm5x5GJtMCUMRxG8jsccG6na:sk4Ib4sQmT6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1abd75d73f33a120acf589506569430c
Files
-
1abd75d73f33a120acf589506569430c.sys windows:5 windows x86 arch:x86
86350bfa4ff4179924965b4b29949828
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwQuerySystemInformation
DbgPrint
KeTickCount
KeBugCheckEx
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 126B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 640B - Virtual size: 628B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 220B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ