Static task
static1
General
-
Target
548f81443fee7fb03279829ae1b3bcab
-
Size
12KB
-
MD5
548f81443fee7fb03279829ae1b3bcab
-
SHA1
0762173e6b12b46e356b8e3bf5ebb46409eb38c0
-
SHA256
7d91c56dc84b327cb352f39fd7d8aa7cdfd76408ee24993daecd17c16e38f37d
-
SHA512
57cce1c66de0ff12be2508a6de9698c6d6882dcf08967e95c7b0864dcd45939a76dc1dfda9d792d85a04c1b92430127a4d651d15892d48bba219dd1d9d2779ba
-
SSDEEP
96:Nvtno7I+N8fnCIqD/Xc6U/CM+8OqJq8rr1NzZ2Lhgr:NVnyNMCHDfc6U/rVFUG1BZih8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 548f81443fee7fb03279829ae1b3bcab
Files
-
548f81443fee7fb03279829ae1b3bcab.sys windows:5 windows x86 arch:x86
d9c9c4541168665f44917e3ddc4a00d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 96B - Virtual size: 74B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ