Static task
static1
General
-
Target
73cf8c07352885c790755e03fe3023ee
-
Size
53KB
-
MD5
73cf8c07352885c790755e03fe3023ee
-
SHA1
a1747543b8a23bb2d29d2bda80cfc1862c5dc667
-
SHA256
5c9762f2fe068b844d9fba8578cebaf00451bb099e8c4192f0ff84f0f4c075ff
-
SHA512
c4d983a7c102748a21a5e3e68a4c86c94b82ee1540d72fb2c3b8adc4c4288d29d4aee7c05a4310174472259c0f3c26dbc29cb4448234f71257ab601470d0af23
-
SSDEEP
768:cgbPYMCyYZoFVzJ9X/Wqq2INAxAExMDH59gMKXxhZWejTeB7Wel4Q:tC7WFB/bCExMDfg5ZWOQpe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 73cf8c07352885c790755e03fe3023ee
Files
-
73cf8c07352885c790755e03fe3023ee.sys windows:5 windows x86 arch:x86
1961a4dfda36008a3d983b5f7c2782a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
PoRequestPowerIrp
KeClearEvent
IoWriteErrorLogEntry
KeQueryTimeIncrement
IoWMIRegistrationControl
ExAllocatePoolWithTag
IoGetRelatedDeviceObject
KefAcquireSpinLockAtDpcLevel
ZwCreateKey
ExFreePoolWithTag
ObfReferenceObject
KeSetEvent
KeInitializeEvent
ExInitializeResourceLite
RtlCopyUnicodeString
NtQuerySystemInformation
KeTickCount
ExDeleteNPagedLookasideList
RtlAnsiStringToUnicodeString
hal
KfAcquireSpinLock
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 128B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 640B - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 768B - Virtual size: 708B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 256B - Virtual size: 242B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ