Static task
static1
General
-
Target
4d3f2b872aefc58d9f4c40c8f8f65696
-
Size
5KB
-
MD5
4d3f2b872aefc58d9f4c40c8f8f65696
-
SHA1
96e4b1ecfd4ce86552ec5620120023d360a263b0
-
SHA256
81348f83258e8168010d4da6d98440e924ae981d6c0b3347b282efdff7d83df0
-
SHA512
53f8c5d14cba201363d35a0e63b1de96adac2d53cdfa0a0b9580c8d429e871e35a68603e9f2a454a0882a77462907503d6cb5429b3c08a5a1707c76e70260b8c
-
SSDEEP
96:hxjOKhEbUR1pt8jjO6U6qJIF9kBeDl1X2vhZcS7M05AYmgSby:hw6tuaPU9Cez2pyngSb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d3f2b872aefc58d9f4c40c8f8f65696
Files
-
4d3f2b872aefc58d9f4c40c8f8f65696.sys windows:4 windows x86 arch:x86
d03ac4f9d5563ad5ecb10b5ac6e521dd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmIsAddressValid
ZwClose
ZwDeleteValueKey
ZwEnumerateValueKey
IoGetCurrentProcess
ZwQueryDirectoryFile
ZwQuerySystemInformation
ZwSetValueKey
ZwTerminateProcess
ZwYieldExecution
MmSystemRangeStart
KeServiceDescriptorTable
IoDriverObjectType
DbgPrint
IoCallDriver
ZwOpenKey
IoBuildDeviceIoControlRequest
ndis.sys
NdisRegisterProtocol
NdisDeregisterProtocol
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 160B - Virtual size: 155B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 288B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 576B - Virtual size: 566B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 384B - Virtual size: 370B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ