Static task
static1
General
-
Target
99b88f538383de5280917615d7a3456a
-
Size
2KB
-
MD5
99b88f538383de5280917615d7a3456a
-
SHA1
489b55ef6b84e61baa683ba4e157daeafbc737c8
-
SHA256
4f8d75e96f6fc205eb2a9779fccf02dc3372494d054705d8d1d632821d88f219
-
SHA512
77ad268376ca9af05828a2416e800223330048a09032b00472f75e6f325e79ef12fbbd0ac181da0255d331ebc6dce8a9b8d003c865f0fe4f4d87dc214d9080ae
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 99b88f538383de5280917615d7a3456a
Files
-
99b88f538383de5280917615d7a3456a.sys windows:5 windows x86 arch:x86
6fa43aabd69dbf887f90e2eb0678a5c2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoCreateSymbolicLink
IoCreateDevice
RtlInitUnicodeString
IofCompleteRequest
DbgPrint
IoDeleteDevice
IoDeleteSymbolicLink
KeServiceDescriptorTable
ProbeForWrite
ProbeForRead
_except_handler3
Sections
.text Size: 640B - Virtual size: 634B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 160B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 352B - Virtual size: 324B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 96B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ