Static task
static1
General
-
Target
716c36fd5af4c9d05f3201554fc44656
-
Size
20KB
-
MD5
716c36fd5af4c9d05f3201554fc44656
-
SHA1
6fed4254e22af1fd289d0462e1f19fb045029a48
-
SHA256
a9811780c41c75785e7652037300338b93fc7bf123cd92f8d390930f2543bedd
-
SHA512
d25e062fd0f14276197849d5d5181bfb45908356d6d9d12dca1f636f587fb6f57003beb587b4d92b2605341f89c4d7b762cc1f0bffdb68cdc8e14dfaa5865d0d
-
SSDEEP
384:GnC9o5C6sqFWmJQmhQ1V03Ue/CyugTsJQEqS3qSCg6NpIJwp:Gyo5CUFpJQmOa3Ue/jBYJQz7g6Npog
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 716c36fd5af4c9d05f3201554fc44656
Files
-
716c36fd5af4c9d05f3201554fc44656.sys windows:5 windows x86 arch:x86
6bb11f1599a1ffbabaf4622053c97890
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExAllocatePoolWithTag
RtlInitUnicodeString
ExFreePoolWithTag
MmGetSystemRoutineAddress
ExRaiseStatus
_except_handler3
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 214B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 204B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ