Static task
static1
General
-
Target
261b5b347ee4f0d8967c5c0c57875ce0
-
Size
3KB
-
MD5
261b5b347ee4f0d8967c5c0c57875ce0
-
SHA1
b3836f6c1c85c679005dafd2044342ebd50f0558
-
SHA256
b8a1f94b2709303e95ca78f7d04c44dd3c9ff722d8611a7f4951343731482213
-
SHA512
1d3a6fdb9dbaabcec01cd35f5772441b4671435210c6bcf75c3ec14ff599d196a9e4988dd3fcb33903c31c63a1f29fc15be1ed6eec2c0de310ed26bf629050d7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 261b5b347ee4f0d8967c5c0c57875ce0
Files
-
261b5b347ee4f0d8967c5c0c57875ce0.sys windows:5 windows x86 arch:x86
4edfd276e71f47012f7caa2851028913
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
ZwDeleteFile
RtlInitUnicodeString
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 107B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 132B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 54B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ