Static task
static1
General
-
Target
293a2ddb903b889c444cee5752f7ca44
-
Size
4KB
-
MD5
293a2ddb903b889c444cee5752f7ca44
-
SHA1
97e0ca278cefd90f153d260bd26571a9a6dd5f7f
-
SHA256
79fb7131904183ba63db108f1cb376493a426dbc727f7883c89f4e4c78d524f1
-
SHA512
ee5d7454f46404631e5514b2b0a5418eeb9f639b122c33eb5fb111078d9a38695c05e8bec36b9777e615d3ba8ac601349d26ad9bb26beb9629d8e26f0ba9c993
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 293a2ddb903b889c444cee5752f7ca44
Files
-
293a2ddb903b889c444cee5752f7ca44.sys windows:6 windows x86 arch:x86
dec7a2a7d7e5766d37afb9a2633ae117
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmGetSystemRoutineAddress
RtlInitUnicodeString
IofCompleteRequest
DbgPrint
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
RtlUnwind
KeBugCheckEx
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 414B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ