Static task
static1
General
-
Target
8c435d77b30e69ca0bc27c1ce66824e5
-
Size
29KB
-
MD5
8c435d77b30e69ca0bc27c1ce66824e5
-
SHA1
eb0e041f3ca3da1750a4093f1ac3cc52ba2da17b
-
SHA256
55741b844300babb6fd71e7d526e8895cc1c7c42ed64b1ab1a70e54ef7b13478
-
SHA512
708c7e27a7343797025af81568e9bd72fd31465b7fd88d63678b15863a8d4934eec54bce7bfc709c83d86dd4b36c2748361b93aa1980ac45ba0774f9f76d725f
-
SSDEEP
384:BPcUSyMttlmyvUnIt7K+6u5iNzggmlubk96xu1nxj/ynYKLB8FQrVHh0ZlW65:BPvSy8myMItezu5mggev14Yw8+dCZlN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c435d77b30e69ca0bc27c1ce66824e5
Files
-
8c435d77b30e69ca0bc27c1ce66824e5.sys windows:4 windows x86 arch:x86
cd9783a564d9a2ad6876fe1da90455ec
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlImageNtHeader
ZwQueryInformationProcess
DbgPrint
DbgBreakPoint
strstr
DbgBreakPointWithStatus
strcpy
KeDetachProcess
NtDeleteAtom
KeQuerySystemTime
ExFreePool
RtlAllocateHeap
ExAllocatePool
CcGetDirtyPages
ZwLoadKey
ZwDeviceIoControlFile
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1009B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 652B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.debug Size: 1024B - Virtual size: 663B
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ