Static task
static1
General
-
Target
71d03f89192709dc598fae55f19d8109
-
Size
22KB
-
MD5
71d03f89192709dc598fae55f19d8109
-
SHA1
2ead2389a3a0e61074dd5d509c3eec294780c1f9
-
SHA256
3d73540b29ab21b9c7567e5d6768111f5e2c45873f4a28d4746140dbe6eac927
-
SHA512
235e365f40168aeaa480977b8808dea05ed22221995bf03b054d9e403ff3c698a60716c75b4b97bff4e4e6e5e4133a657e2dbed65580fcf7fbff7d10c0a53b7b
-
SSDEEP
384:S8eUHZaKFz6gv1G4Jnj5rDMhg/ZrcbZxRFdIhZFnFzEp262dgfV22LMZ:SQHL2M1Gsnj5rDMhg/Zr6xRWFg2fdgfC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71d03f89192709dc598fae55f19d8109
Files
-
71d03f89192709dc598fae55f19d8109.sys windows:4 windows x86 arch:x86
1f1435b1ef5e2b1488e6ce8c691c8b09
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
_wcsicmp
ExInterlockedAddLargeInteger
FsRtlUninitializeLargeMcb
CcSetLogHandleForFile
ZwQueryInformationProcess
RtlDeleteRange
ExInterlockedInsertTailList
RtlLookupElementGenericTableFull
ExFreePool
ExAllocatePool
IoAttachDeviceToDeviceStack
mbtowc
wcsncmp
PsGetVersion
memset
KeIsExecutingDpc
CcPrepareMdlWrite
KefReleaseSpinLockFromDpcLevel
ZwDeleteValueKey
KeAcquireSpinLockAtDpcLevel
ZwQueryInformationFile
MmUnmapViewOfSection
FsRtlCopyWrite
KeReleaseMutex
ExInitializePagedLookasideList
ZwDeleteKey
NtSetQuotaInformationFile
ZwQueryDefaultLocale
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
ILIT Size: 1024B - Virtual size: 614B
IMAGE_SCN_MEM_READ
.bac Size: 512B - Virtual size: 260B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cab Size: 512B - Virtual size: 52B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ