Static task
static1
General
-
Target
45cb3e0071b0c0f15aad05ecc2fd89e5
-
Size
3KB
-
MD5
45cb3e0071b0c0f15aad05ecc2fd89e5
-
SHA1
4d95c7ac6b69ceb591e9246eda9fe9264ed12f29
-
SHA256
9d04b715127a9ae9169eb2c2f919831359f56e4337c7ffbd753c3309f6f1ab70
-
SHA512
70016e21ae0da7e6e1e85d9c76990c9f87592230a3e09862e78d7097a72b101510fb5d4a5014d95ef3bc0d65a684a10ba8ccc9826fcbc4247d575c2f8d1bbb33
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45cb3e0071b0c0f15aad05ecc2fd89e5
Files
-
45cb3e0071b0c0f15aad05ecc2fd89e5.sys windows:5 windows x86 arch:x86
4bfff747a64a6242d9e8f6569453cb8d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IofCompleteRequest
ProbeForRead
KeServiceDescriptorTable
_except_handler3
IoDeleteDevice
IoDeleteSymbolicLink
IoCreateSymbolicLink
DbgPrint
IoCreateDevice
memmove
RtlInitUnicodeString
KeTickCount
Sections
.text Size: 896B - Virtual size: 792B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 120B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ