Static task
static1
General
-
Target
1c24a961a0a1aee4aaad6d49182f3ad8
-
Size
28KB
-
MD5
1c24a961a0a1aee4aaad6d49182f3ad8
-
SHA1
437f2bd3d90c3bd0b8daaad172e7c9eccf43ce6d
-
SHA256
f66adbb2f510e97858d1b11578729e8318b588299a9998151d3daaf4f3b0b7e7
-
SHA512
cc274bc45cdf330496a5f4d513c5bcdeb98866e209228263846570edb739e56729bff9907848e9d02316101fbfd9aff00fb704cbc58405646f700828e8d5217e
-
SSDEEP
768:/fKRtlKF2rYBIbmwXfgnMXSxV6icRZJLTkkgEYc:KKiqFxxqZOq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1c24a961a0a1aee4aaad6d49182f3ad8
Files
-
1c24a961a0a1aee4aaad6d49182f3ad8.sys windows:5 windows x86 arch:x86
3252eff1921275d950c1d37c99fc90d4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeDelayExecutionThread
ExAllocatePoolWithTag
ExFreePool
RtlCompareUnicodeString
_except_handler3
PsCreateSystemThread
RtlInitUnicodeString
Sections
pQHMAlld Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FRVcGBkN Size: 128B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DXfFzsTj Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RPgrnVsM Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CSYqeIeF Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE