UfkhQthcmxjSfysuVbq
Vadxesa
WbKiwphYnipIgnowWex
GaExamhDzkdHlwhgsqRgl
QfydubsUnbveysOspa
Static task
static1
1 signatures
General
-
Target
bfd269ed19c902086f8b7467636f6956
-
Size
71KB
-
MD5
bfd269ed19c902086f8b7467636f6956
-
SHA1
8ddc51bf38c6716eaa152829b6757590890c1d92
-
SHA256
9671472ee396d35acfc5f62d485e844cf31ae8ddea336795da5c0c7356a05a63
-
SHA512
b7085ebefcbee62677c3b91b5430abec9e898620e55816d0210123b1f9c72a98c8654f20a4fe93d1beb15bc490b2a3e8616962da6a1a20c3c72f4465decd78cd
-
SSDEEP
1536:/hfZxy+L5l0HiOVgk7fz8r7TEmbSouUC5BvJi7BH:Zjys5w3Vgk7fz8r7TEmKPJi7BH
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bfd269ed19c902086f8b7467636f6956
Files
-
bfd269ed19c902086f8b7467636f6956.sys windows:4 windows x86 arch:x86
e8fb978131745594315b763b9235806e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoAllocateMdl
_vsnprintf
IoStartPacket
RtlCopyRangeList
RtlInitString
ZwCreateSection
RtlAssert
memcpy
RtlAnsiStringToUnicodeString
ExAllocatePool
IoSetIoCompletion
RtlCompareUnicodeString
RtlImageNtHeader
ZwOpenFile
wcscspn
ExFreePool
ExExtendZone
RtlFreeUnicodeString
RtlIsValidOemCharacter
classpnp.sys
ClassReadDriveCapacity
ClassSendSrbAsynchronous
ClassRemoveDevice
ClassInvalidateBusRelations
ClassModeSense
ClassSplitRequest
ClassWmiCompleteRequest
ClassBuildRequest
ClassInitialize
ClassCreateDeviceObject
ClassUpdateInformationInRegistry
ClassInitializeTestUnitPolling
ClassGetVpb
ClassDisableMediaChangeDetection
ClassNotifyFailurePredicted
ClassReleaseChildLock
ClassEnableMediaChangeDetection
ClassSetMediaChangeState
hal
HalHandleNMI
HalSetBusDataByOffset
HalBeginSystemInterrupt
HalGetInterruptVector
KeAcquireQueuedSpinLockRaiseToSynch
WRITE_PORT_BUFFER_ULONG
Exports
Exports
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 56B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ