YwGrqxRxypwc
MzRioixnVihbluXx
Static task
static1
1 signatures
General
-
Target
57a0ff7fd6753270fc44667f13528c8e
-
Size
73KB
-
MD5
57a0ff7fd6753270fc44667f13528c8e
-
SHA1
e9d7a79b65042f233f751311d9b8bd48a29762c2
-
SHA256
236a0d724a9b535405d173cd596c3727311ef59348c3d856f9f930d3c33a6561
-
SHA512
13787e06f9bfa44b39af944a2a9a996c605da06bee7ac3d3520968cfdcb217aae0b1dd852fdf8bd514a459412640707dfc9591b9087ace5d1f212a5fecc9841b
-
SSDEEP
768:6QpYc4oQZYKXVHoZwrpqqIe2ZzgG/5mCM/pChUGsFBpmp19ltfu4KnMXfUOzpOlk:RdQZYgoZwrtIeE8omJvdk9duRMsq6nm
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57a0ff7fd6753270fc44667f13528c8e
Files
-
57a0ff7fd6753270fc44667f13528c8e.sys windows:5 windows x86 arch:x86
295866de0900134e3a1f2bffcb4ab91f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
PoRegisterSystemState
InbvCheckDisplayOwnership
ExInterlockedExtendZone
isupper
IoConnectInterrupt
memchr
memcpy
MmUnsecureVirtualMemory
ZwSetInformationFile
ExAllocatePool
wcstombs
RtlFindSetBitsAndClear
ExExtendZone
rand
ExFreePoolWithTag
RtlImageNtHeader
MmFreeContiguousMemorySpecifyCache
strspn
sprintf
isdigit
ZwInitiatePowerAction
FsRtlIsNameInExpression
PsSetProcessPriorityByClass
LpcRequestPort
MmGetPhysicalAddress
islower
KeRegisterBugCheckReasonCallback
IoSetSystemPartition
NtWriteFile
isspace
RtlDowncaseUnicodeString
ExDeletePagedLookasideList
ExFreeToPagedLookasideList
MmRemovePhysicalMemory
IoQueryFileDosDeviceName
IoSetPartitionInformation
strcmp
_alldvrm
DbgPrint
FsRtlInitializeOplock
ZwDuplicateToken
KeSetIdealProcessorThread
towlower
Exports
Exports
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data2 Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ