Static task
static1
General
-
Target
8f6ad6913dca036cda2cd7b726b1742f
-
Size
22KB
-
MD5
8f6ad6913dca036cda2cd7b726b1742f
-
SHA1
62e46b41e1a0218ea317e7db5714af7c600945ac
-
SHA256
0b9f82cb211cc40ef9cee2bd05d54b23f7039146fc471fba96769eb62c19bbfb
-
SHA512
3ea109c6bbe761332e60c251c047f33c93a5ecc0e072f76fe6bf4d2d24509e38b74fe8b0ad91f9a3798b5ef99297d4e93364f01e1bda143982a5cebc3149c99c
-
SSDEEP
384:cCf1TsKNABv0sC6RO5FkyQu9H6DmVdrObiOLeC7pm:RdTscAWjGOHkyQuGId7OLVpm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8f6ad6913dca036cda2cd7b726b1742f
Files
-
8f6ad6913dca036cda2cd7b726b1742f.sys windows:5 windows x86 arch:x86
58312395bcfb1f9ec09119eca4f886b5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmGetSystemRoutineAddress
RtlInitUnicodeString
ExRaiseStatus
ExAllocatePoolWithTag
_except_handler3
ExFreePoolWithTag
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 256B - Virtual size: 214B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ