Static task
static1
General
-
Target
25a5d7088013e032fcda9c2df99474a5
-
Size
3KB
-
MD5
25a5d7088013e032fcda9c2df99474a5
-
SHA1
6ab2eec0117e840e02dbb218c8daa9ad52841db8
-
SHA256
43c10e043050f291a67efd0af36bb04f50562f9f71b3d6a14f63a882ea33854c
-
SHA512
db535914a3ecd0e860823d197bac27e64393d0c5c07445f2d1c8fc05000ed2eb9c7c20fae5e5923eadca757ea5caf588638774dd570f59cff9fed82bb6ee9fb4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25a5d7088013e032fcda9c2df99474a5
Files
-
25a5d7088013e032fcda9c2df99474a5.sys windows:5 windows x86 arch:x86
711afab1cc392c0babc5a18cf574a3a0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeDetachProcess
wcslen
KeAttachProcess
ZwTerminateProcess
IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
IoGetCurrentProcess
IoCreateSymbolicLink
IoCreateDevice
_except_handleR3
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 346B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ