Static task
static1
General
-
Target
44474ad368f5e347dc72929294f04afe
-
Size
2KB
-
MD5
44474ad368f5e347dc72929294f04afe
-
SHA1
78d509cab503831073f127ea3d2c34fbc5d9520e
-
SHA256
57b6c9d80d80dc9bb9985a2e1d4a2f16c580ebaf1a7321caae97079fac30e024
-
SHA512
3fd6950cbd967df3bb343264521e6f052f73ac7857bdd6684f0f48aafeceb1c3a7b31ad27c4dece52fa76561834a1045cf4c5cec338db35eac27cc798bf211e9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 44474ad368f5e347dc72929294f04afe
Files
-
44474ad368f5e347dc72929294f04afe.sys windows:5 windows x86 arch:x86
a52ff91841b8c02abf884a5380057161
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
ProbeForWrite
KeServiceDescriptorTable
ProbeForRead
_except_handler3
IoDeleteDevice
IoDeleteSymbolicLink
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
KeTickCount
Sections
.text Size: 640B - Virtual size: 564B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 382B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ