Static task
static1
General
-
Target
6f93cc0445f568c66312268fdfe767ae4d2df3d7ffa23719eca97c37894a936d
-
Size
3.1MB
-
MD5
2ef9203c2e2ae2c3ab1740796c898b47
-
SHA1
f8d2cc630e76d7b0f4d7984a25fd4f02de71b73f
-
SHA256
6f93cc0445f568c66312268fdfe767ae4d2df3d7ffa23719eca97c37894a936d
-
SHA512
0615056ec341d4067c9ce83d116679d1556bbe62d5e21ab6c349f613b72af04c322901e6826acc795b3e89fb0a116fcee0c575f56060e454d30bc45c22a2c1ff
-
SSDEEP
98304:ua9LkPlXxpDlY2JaLBYaFFWc3bsgWY6Djdg:uILkNn3aLRiDY6Djdg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f93cc0445f568c66312268fdfe767ae4d2df3d7ffa23719eca97c37894a936d
Files
-
6f93cc0445f568c66312268fdfe767ae4d2df3d7ffa23719eca97c37894a936d.sys windows:10 windows x64 arch:x64
959b24886c3c3f7c2b4882aff8432933
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
netio.sys
WskCaptureProviderNPI
ntoskrnl.exe
strtok_s
ExAllocatePool
NtQuerySystemInformation
ExFreePoolWithTag
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
KeQueryActiveProcessors
KeSetSystemAffinityThread
KeRevertToUserAffinityThread
DbgPrint
hal
KeQueryPerformanceCounter
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 260B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ABCD0 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ABCD1 Size: 1024B - Virtual size: 648B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ABCD2 Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ