Static task
static1
General
-
Target
cdccca11492c2c569824d47947b56734
-
Size
28KB
-
MD5
cdccca11492c2c569824d47947b56734
-
SHA1
91a08fdc88d908d6874316189970075054d03cd9
-
SHA256
c1b3d73cb105b792588b2236cd9796d0b052402c9d419dfa40c5f20fcd06fb7b
-
SHA512
e1b083ebda894a509b7f00a64e39deac4d050626bee58ba0c45b1fcd4781780f045f15a2b9831d81459b50ba8ad14593773d2895751df374bf3390e42f18c14a
-
SSDEEP
768:fZjMJ36f5C7bup0jhjfUqZBjAgvhFDgKet7ywDw:fZYSC+pKBfUiBjtvXAP0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cdccca11492c2c569824d47947b56734
Files
-
cdccca11492c2c569824d47947b56734.sys windows:4 windows x86 arch:x86
56c9a74cb1f4f96bac47dfcbcb09f2a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
swprintf
wcslen
wcscat
wcscpy
strncmp
_strnicmp
RtlInitUnicodeString
RtlCopyUnicodeString
strncpy
RtlAnsiStringToUnicodeString
MmGetSystemRoutineAddress
_except_handler3
_stricmp
_wcsnicmp
ObfDereferenceObject
IofCompleteRequest
ExFreePool
_snprintf
ExAllocatePoolWithTag
ZwClose
ZwOpenKey
_itow
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 896B - Virtual size: 878B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ