Static task
static1
General
-
Target
3ff65113f601dc724bfc57d426bc0933
-
Size
14KB
-
MD5
3ff65113f601dc724bfc57d426bc0933
-
SHA1
6119caf304ef00ef51c230859facf88544bca397
-
SHA256
42f7f0914fac02141ca129ff12d7f76c3823518bf0708568e1c2cc545f57a1ef
-
SHA512
6aa94fe58c32da252c15fbb86a3d862440e8327d0c703dc0be5288d0302fa37df4c33e033550d073a5e3ec37907bf83b2348a97541b83e8eedd38128316fb724
-
SSDEEP
192:Eu5QsmSHlwZSvOV4vq7PacVUoL9e35MCCUPGTnEIGQsw+X:EaQsmIe8mIePP9oMCsgZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3ff65113f601dc724bfc57d426bc0933
Files
-
3ff65113f601dc724bfc57d426bc0933.sys windows:6 windows x86 arch:x86
112a10e87ff78316cc01d256069fa8a4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeTickCount
IofCompleteRequest
RtlInitUnicodeString
memset
memcpy
MmMapLockedPagesSpecifyCache
strstr
hal
KfReleaseSpinLock
KfAcquireSpinLock
ndis.sys
NdisReEnumerateProtocolBindings
NdisIMDeInitializeDeviceInstance
NdisGetReceivedPacket
NdisDprAllocatePacket
NdisIMCancelInitializeDeviceInstance
NdisIMNotifyPnPEvent
NdisQueryPendingIOCount
NdisCloseAdapter
NdisSetEvent
NdisMSetAttributesEx
NdisIMGetDeviceContext
NdisFreePacket
NdisIMCopySendCompletePerPacketInfo
NdisIMCopySendPerPacketInfo
NdisAllocatePacket
NdisIMGetCurrentPacketStack
NdisRequest
NdisMIndicateStatusComplete
NdisMIndicateStatus
NdisReturnPackets
NdisGetPoolFromPacket
NdisCancelSendPackets
NdisFreePacketPool
NdisFreeMemory
NdisAllocateMemory
NdisWaitEvent
NdisResetEvent
NdisMDeregisterDevice
NdisDeregisterProtocol
NdisTerminateWrapper
NdisIMAssociateMiniport
NdisIMDeregisterLayeredMiniport
NdisRegisterProtocol
NdisMRegisterUnloadHandler
NdisIMRegisterLayeredMiniport
NdisInitializeWrapper
NdisMRegisterDevice
NdisMSleep
NdisCloseConfiguration
NdisIMInitializeDeviceInstanceEx
NdisOpenAdapter
NdisAllocatePacketPoolEx
NdisInitializeEvent
NdisAllocateMemoryWithTag
NdisReadConfiguration
NdisOpenProtocolConfiguration
NdisDprFreePacket
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 349B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 640B - Virtual size: 634B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ