Static task
static1
General
-
Target
bfd91d1c3e06d0bafc1e68e54f38d82f
-
Size
20KB
-
MD5
bfd91d1c3e06d0bafc1e68e54f38d82f
-
SHA1
8d469054881c0884623312c4697642ad1b7e7bdc
-
SHA256
b8edd035ef30d2aa0d177dcb3ff4277f40c7fe3fb02d4e157610a604d2fb5cc5
-
SHA512
2af763d8080e5a1d76d45c3ef560447433ce74c5d78cc80d8a7ca3d3b9ca9349da7ea7386f93feca8c1d1ce71c7cd6206a51395dc0e2aedaa49549669e53914a
-
SSDEEP
48:iclZgKPndEXlX0cn3hEE9qpC4cUAG7nwJDFY6wZUh0NGJjM+Ik:ng0ne2cnxkpVwynqa6z0NG5/H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfd91d1c3e06d0bafc1e68e54f38d82f
Files
-
bfd91d1c3e06d0bafc1e68e54f38d82f.sys windows:5 windows x86 arch:x86
d9c9c4541168665f44917e3ddc4a00d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 96B - Virtual size: 74B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 96B - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ