Static task
static1
General
-
Target
763a628aa46c1d634b58da9de5bdb157
-
Size
31KB
-
MD5
763a628aa46c1d634b58da9de5bdb157
-
SHA1
e7fe1e6b447265220b1ce26733caf0834ee0877d
-
SHA256
31164ee28efcf365248bc58867c8acfb758e4b3888508bf3160d50822b05c951
-
SHA512
533f2dde9533be90b93c3fa352b635bc69206956eeead3ec79031bf29a0bcaff4ebfe7ac2ba2e50be61e4c002abacb729f77416a123fbe7e0c9dab1f913a1973
-
SSDEEP
384:ElONx2UQlGUQXvdBJtI0ab7OeKHgkf6CWfY0Dk7kJVd79H5XZ8jr5Su3yH:zxbTFBJRab7OeKf1Cz98J3yH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 763a628aa46c1d634b58da9de5bdb157
Files
-
763a628aa46c1d634b58da9de5bdb157.sys windows:6 windows x86 arch:x86
b51d29b3530d25827573676942998e55
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
memcpy
ExFreePoolWithTag
ExAllocatePoolWithTag
ZwQuerySystemInformation
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 145B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 156B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 110B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ