Static task
static1
General
-
Target
42b93f6962d470a9b478a3c63300e1fd
-
Size
100KB
-
MD5
42b93f6962d470a9b478a3c63300e1fd
-
SHA1
5eedf99fbd739adfcff1bfe162d3fdf29c5b23f9
-
SHA256
93d41f44dd5c641af1c11ca37951af771994d140a536050f9b25d9f344dc0e8d
-
SHA512
cda58aa8a9b0baf9a47bd098c03d6ca9ef1502e033a3f4e400a29586484bf65f58526ea2aac8b5bb14b0f6843b96a967a88bd7d6ba15c56dba81e87862785c66
-
SSDEEP
1536:qA1777FAUqkCnvh+2PBBSitjmNNAS1JPJcy5x9qiy2bi1XHCUH4GqjKBDwhRBU9:hA9kR2aitSNAyPqOqPFHW3jKGh89
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42b93f6962d470a9b478a3c63300e1fd
Files
-
42b93f6962d470a9b478a3c63300e1fd.sys windows:5 windows x86 arch:x86
a52c0e44d672bba76ae509f2a8ed05cf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeDelayExecutionThread
DbgPrint
ExAllocatePoolWithTag
ZwReadFile
ZwWriteFile
sprintf
ZwCreateFile
RtlInitUnicodeString
ZwQueryInformationFile
_except_handler3
ZwClose
Sections
PAGE Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 384B - Virtual size: 306B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ