Static task
static1
General
-
Target
3caceceb749df1a0c39f819cb201235a
-
Size
2KB
-
MD5
3caceceb749df1a0c39f819cb201235a
-
SHA1
711eb2abc0198ec1ef621964677c67d623c29277
-
SHA256
f24985397c0b7784b683e6c0f2c0ef46bfc5e2e530c7f6686e4483535ea8a69e
-
SHA512
e0610397e6ca2bb9624226573d5d77424da1c69da56f24d8f3dc0205e9c9ca318a09a8007b6472acda8efb95de3a308045012286a979da632981bc493bf40afc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3caceceb749df1a0c39f819cb201235a
Files
-
3caceceb749df1a0c39f819cb201235a.sys windows:5 windows x86 arch:x86
97a8fcb81cca995ded498133c0d6f73a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
_except_handler3
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
KeTickCount
Sections
.text Size: 640B - Virtual size: 564B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 402B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ