Static task
static1
General
-
Target
cc7e8d37811008bffce616000bad3efb
-
Size
27KB
-
MD5
cc7e8d37811008bffce616000bad3efb
-
SHA1
5c6288cc5debafc524c4cb9e5b9c1f42fbb954c9
-
SHA256
807239bdbd5bea6ac7aeabe5b453b11309af372b86b585919f16ebb620aa3c74
-
SHA512
8f571a8d4ec991a40b8e4ea19874c4692bdfb38d4deb7ce2d34fe2324b332ba85759c23011caef71762ce350594c02acba2609ea4a6b2d380852a0a3f1478d67
-
SSDEEP
384:M/+NmCrFznovAnkKVdYCNV/eH1Ee2lem0E/khYzOUQKkCQUurfE:q+cojovgvbNe2P5/khYitLp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc7e8d37811008bffce616000bad3efb
Files
-
cc7e8d37811008bffce616000bad3efb.sys windows:5 windows x86 arch:x86
9e0f837fb25cc08d8c519eece41ad3ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoBuildDeviceIoControlRequest
memset
IoWMIQueryAllDataMultiple
IoGetDeviceInterfaceAlias
RtlUnicodeToMultiByteN
ExAllocatePool
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 220B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ