Static task
static1
General
-
Target
9668d9a9ebcc9ba81f7743e703b42f9a
-
Size
27KB
-
MD5
9668d9a9ebcc9ba81f7743e703b42f9a
-
SHA1
17164e9538d1b72f7363ba454966c88d0740dcc9
-
SHA256
8a447429446415878977d2599d3af5fc2a6ae50e743ad070754437ba55c5ff75
-
SHA512
b1b391349a3be28909a8bbb978cfee10f6344ccef8a156ecbcfb4742c2b64c5bdeed59d55ddc87058703836fe1dff4f42b0a0feff8d5b0fd8653aa150cbc02bf
-
SSDEEP
768:oFyqcCzfLDQ284DyuSNohYmdPCVkJnSOx2BvkP:URcEfg4FgohP6V6bCv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9668d9a9ebcc9ba81f7743e703b42f9a
Files
-
9668d9a9ebcc9ba81f7743e703b42f9a.sys windows:5 windows x86 arch:x86
c95f52f9506b7433a4e02a6bb74ba5dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
memset
RtlAppendUnicodeStringToString
IoWMIQueryAllDataMultiple
IoGetDeviceInterfaceAlias
ExAllocatePool
IoBuildDeviceIoControlRequest
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 228B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ