Static task
static1
General
-
Target
45b7d6e0b5aa97c7a7c4beb5ece622ce
-
Size
4KB
-
MD5
45b7d6e0b5aa97c7a7c4beb5ece622ce
-
SHA1
b88add4616b4e928ab12d02998d063f0112b292e
-
SHA256
f9ea81106dff462ed2f4e00b146dd3d57851ec2df43f0ae36af60709bfc3c06e
-
SHA512
24a667539251df663f4da6a9e52ef93f8479c175af22617538f09de041f2dd4a008b358b02d679d17fd08316c815aef02008218a3427d38a28127e570d1a491e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45b7d6e0b5aa97c7a7c4beb5ece622ce
Files
-
45b7d6e0b5aa97c7a7c4beb5ece622ce.sys windows:5 windows x86 arch:x86
5ec0b7f9ca09f01b4ebe7851a68df9e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
PsGetCurrentProcessId
ZwQuerySystemInformation
ZwOpenProcess
KeServiceDescriptorTable
IoDeleteDevice
IoDeleteSymbolicLink
RtlInitUnicodeString
IoCreateSymbolicLink
IoCreateDevice
KeTickCount
Sections
.text Size: 1024B - Virtual size: 819B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 153B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 418B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ