Static task
static1
General
-
Target
22d0f9bc05eebd8fb0a62046d98fe588
-
Size
6KB
-
MD5
22d0f9bc05eebd8fb0a62046d98fe588
-
SHA1
86e57d1a47a3c79050b02facd9577468fab3ce2b
-
SHA256
0a5e6b4ee9746ca8fb303f54b3050ea86ad81dff1c3d67c46f2b6db192f50ccf
-
SHA512
4864ffdcd040dde6cae15933b59b8dcc519489d61150ecd1f2f4bed8861dd67c9a241b575b7fa1cf75e2e71525fae6797853625d11a61883cbed46d9fc5d016c
-
SSDEEP
96:pdCIfqfwhceufwhyhhSuhwihm2fAmfourSufuvh9fHOhenZt7pET+hgrxRLEelUd:5YSrzj4SMknU+hgrxRYeO3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22d0f9bc05eebd8fb0a62046d98fe588
Files
-
22d0f9bc05eebd8fb0a62046d98fe588.sys windows:5 windows x86 arch:x86
6e634702e5c9a0186d86225da06bebef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ZwCreateFile
IoRegisterBootDriverReinitialization
RtlAssert
ZwClose
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 152B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ