Static task
static1
General
-
Target
c07bb7fe6ae2a11e6f82f42d9e81369f
-
Size
130KB
-
MD5
c07bb7fe6ae2a11e6f82f42d9e81369f
-
SHA1
853e08a94fe76825c8798164b284d1504b710943
-
SHA256
b849fe17adf57ec967d4c71080b25fd3f6fbe3dae04d5aa65684d558b696e642
-
SHA512
c44a9068d9ce60030a23eaf55d824a5d9f698c34acaf3f103d0e7f48947bdc684fd6a37b46bd9970225b2d548aaf965ed7fffac94fc6c27372a7c2ad3847dfb0
-
SSDEEP
3072:g2Ky8ZolWbZHdzgKjLuAzEUji5nTLzHWZ8X+nB:g2Kdo8bnEZAzojWOY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c07bb7fe6ae2a11e6f82f42d9e81369f
Files
-
c07bb7fe6ae2a11e6f82f42d9e81369f.sys windows:4 windows x86 arch:x86
f98faff7ffe33202437070ec62f0f24f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ExAllocatePoolWithTag
RtlInitUnicodeString
KeInitializeEvent
IofCallDriver
ExFreePoolWithTag
IoDeleteDevice
IoCreateDevice
PoCallDriver
IoFreeIrp
ObfDereferenceObject
PoStartNextPowerIrp
IoDetachDevice
RtlFreeUnicodeString
MmMapLockedPagesSpecifyCache
KeInitializeDpc
RtlQueryRegistryValues
IoOpenDeviceRegistryKey
IoFreeMdl
IoAllocateMdl
KeInitializeTimer
IoBuildDeviceIoControlRequest
IoFreeWorkItem
IoWMIRegistrationControl
ObReferenceObjectByHandle
KeSetTimer
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
MmGetSystemRoutineAddress
KeReleaseSpinLockFromDpcLevel
PsCreateSystemThread
IoGetDeviceProperty
KeInsertQueueDpc
RtlAnsiStringToUnicodeString
DbgPrint
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IoDeleteSymbolicLink
_vsnwprintf
IoAcquireRemoveLockEx
IoInitializeRemoveLockEx
RtlUnicodeStringToAnsiString
KeResetEvent
RtlAppendUnicodeToString
ObfReferenceObject
MmMapIoSpace
IoReleaseRemoveLockEx
KeQueryTimeIncrement
KeInitializeMutex
IoCreateSymbolicLink
_vsnprintf
IoGetAttachedDeviceReference
KeSetTimerEx
ExDeleteNPagedLookasideList
ExInitializeNPagedLookasideList
KeWaitForMultipleObjects
IoDisconnectInterrupt
IoConnectInterrupt
ZwCreateFile
RtlWriteRegistryValue
MmProbeAndLockPages
IoInvalidateDeviceRelations
IoGetDmaAdapter
KeSetPriorityThread
IoGetDeviceObjectPointer
ZwQuerySystemInformation
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ