Static task
static1
General
-
Target
37534d4d535b65167d9df11c4f2f8902
-
Size
21KB
-
MD5
37534d4d535b65167d9df11c4f2f8902
-
SHA1
e33d4e244c1eaa16828c4b4452bfa6607cae46a8
-
SHA256
3a446d576047f066019d5253828400444af780e9340fae8ce5dc7fc3c880a0fa
-
SHA512
fe5b98b7a524f8acbf5adb11ca0f76b03fa6e89d2966fb478c0887d7759c8f0c513d6700ea94af1705724022ae10b6f45236711e0241f2f6006e9abaf9cb9aa6
-
SSDEEP
384:iTDjZmAv4w6R57lIrvGITM2DZ3Rw6cNx6Xt4sIKtZVM:ihww6R57CGMM2dBw6Sx699PtZ+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37534d4d535b65167d9df11c4f2f8902
Files
-
37534d4d535b65167d9df11c4f2f8902.sys windows:5 windows x86 arch:x86
b7402d4b43a639be2e346484763bf911
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
strstr
DbgPrint
RtlAssert
ndis.sys
NdisTerminateWrapper
NdisQueryPendingIOCount
NdisPacketPoolUsage
NdisReEnumerateProtocolBindings
NdisIMNotifyPnPEvent
NdisSetEvent
NdisReleaseSpinLock
NdisAcquireSpinLock
NdisMSetAttributesEx
NdisIMGetDeviceContext
NdisFreePacket
NdisIMCopySendCompletePerPacketInfo
NdisIMCopySendPerPacketInfo
NdisAllocatePacket
NdisSend
NdisIMGetCurrentPacketStack
NdisFreeMemory
NdisQueryBufferSafe
NdisAllocateMemory
NDIS_BUFFER_TO_SPAN_PAGES
NdisQueryBufferOffset
NdisRequest
NdisReturnPackets
NdisGetPoolFromPacket
NdisTransferData
NdisWaitEvent
NdisCloseAdapter
NdisResetEvent
NdisCancelSendPackets
NdisFreePacketPool
NdisIMAssociateMiniport
NdisIMDeregisterLayeredMiniport
NdisRegisterProtocol
NdisInitUnicodeString
NdisMRegisterUnloadHandler
NdisIMRegisterLayeredMiniport
NdisInitializeWrapper
NdisAllocateSpinLock
NdisMRegisterDevice
NdisMSleep
NdisMDeregisterDevice
NdisDeregisterProtocol
NdisCloseConfiguration
NdisIMInitializeDeviceInstanceEx
NdisOpenAdapter
NdisAllocatePacketPoolEx
NdisInitializeEvent
NdisAllocateMemoryWithTag
NdisReadConfiguration
NdisOpenProtocolConfiguration
NdisIMDeInitializeDeviceInstance
NdisIMCancelInitializeDeviceInstance
NdisDprFreePacket
NdisDprAllocatePacket
NdisGetReceivedPacket
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 357B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1020B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ