WoyCnwaIhmpk
OgsweglTguefMoyqm
FyeilcVfiuevsZkidrv
Static task
static1
1 signatures
General
-
Target
74d779bc869ec60b69ed064b5c29e3ac
-
Size
19KB
-
MD5
74d779bc869ec60b69ed064b5c29e3ac
-
SHA1
22c8569c9e93b8320661aa26741f8ea320b9ebbe
-
SHA256
eb112809f117f16ce7b6d6a0e2770016c4c5b3bb1e51dfd37a4ad1595e6abf22
-
SHA512
6c38c1055df0d09f1f27159bc4fd2f7f08cb7d1c30379d2ab6d900ed5b189c212ca82c189775300e6d94dbf02cd9ab601834f21d08a1d9381c4aee2d433c142d
-
SSDEEP
384:bYYZpLF9sgL56DP/i1rCQqcnMBINUaySQk9PO7L9fxXMZ:0+tX5L56bq9CQqcnMXuHc7fK
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 74d779bc869ec60b69ed064b5c29e3ac
Files
-
74d779bc869ec60b69ed064b5c29e3ac.sys windows:4 windows x86 arch:x86
1f9cd4c3fd147e310aa27c89da0c7215
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExInitializeRundownProtection
ZwQueryInformationProcess
RtlFindLongestRunClear
PsRestoreImpersonation
DbgPrint
CcPrepareMdlWrite
FsRtlInitializeMcb
IoCreateSymbolicLink
RtlAppendUnicodeStringToString
IoReportResourceForDetection
CcGetDirtyPages
FsRtlNotifyFilterChangeDirectory
ExFreePoolWithTag
KeInsertQueueDpc
MmIsAddressValid
FsRtlIsNtstatusExpected
NtDuplicateObject
RtlInt64ToUnicodeString
NtAllocateUuids
memcpy
READ_REGISTER_BUFFER_ULONG
ZwCreateFile
RtlReserveChunk
FsRtlLookupLastLargeMcbEntry
ZwDisplayString
CcPreparePinWrite
KeStackAttachProcess
RtlImageNtHeader
IoWritePartitionTableEx
KdDebuggerEnabled
ExAllocatePool
strcmp
Exports
Exports
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT Size: 1024B - Virtual size: 889B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ