Static task
static1
General
-
Target
2a8550797d3d843733f78acc2b909873
-
Size
7KB
-
MD5
2a8550797d3d843733f78acc2b909873
-
SHA1
5a3d108590fc9e852592bc5bd95205003fdb0370
-
SHA256
e38c7d6547b82b2b1df8feb19cba02e082907174c51ed365dc2d75f8313bc13e
-
SHA512
14a55c3f2506d160c9735023e8ab2a05985b975503be07e826eb068052d2c1f33225ecd8765a0ba1bfab28343843aaca86557194b03065775c500be58ae5c0e6
-
SSDEEP
192:63JXawJEhsws9Np6/7Nt0W9XoqbjYSEOcLTTRT:iXkhs14zb0HOcL1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a8550797d3d843733f78acc2b909873
Files
-
2a8550797d3d843733f78acc2b909873.sys windows:5 windows x86 arch:x86
5b2a8d2475ba615434e25c9a2cf555ae
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitUnicodeString
IoDeleteSymbolicLink
IoDeleteDevice
KeReleaseSemaphore
KeSetTimer
KeWaitForSingleObject
KeInitializeTimer
IoDetachDevice
IoCreateSymbolicLink
KeInitializeSemaphore
KeInitializeSpinLock
PsTerminateSystemThread
ExfInterlockedRemoveHeadList
IoCreateNotificationEvent
ObReferenceObjectByHandle
PsCreateSystemThread
IoBuildDeviceIoControlRequest
KeInitializeEvent
RtlFreeUnicodeString
IoAttachDevice
RtlAnsiStringToUnicodeString
RtlInitAnsiString
IoCreateDevice
ExfInterlockedInsertTailList
ExAllocatePoolWithTag
KeTickCount
KeBugCheckEx
KeClearEvent
IofCompleteRequest
ZwClose
IofCallDriver
hal
READ_PORT_UCHAR
KeStallExecutionProcessor
WRITE_PORT_UCHAR
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 460B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 314B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ