f03fc26279e13fee155460a2e1d07fd9a85439b19dbb1fe76923b6f5b5dbdcd8

Sharing

Copy URL Twitter E-mail

General

Target

f03fc26279e13fee155460a2e1d07fd9a85439b19dbb1fe76923b6f5b5dbdcd8
Size

6KB
MD5

85d1ee87887054902eb581dcb76b5f0e
SHA1

f2bff553903a20cd7081e916815049dc20178957
SHA256

f03fc26279e13fee155460a2e1d07fd9a85439b19dbb1fe76923b6f5b5dbdcd8
SHA512

966781cad8fd0771307faf0544e7f2d721ec96a2710431b48ce72b205feb81dd56917070ed0fd362199c28aa7947cd8306fdad4348b5b91ea0fee46605b3f89a
SSDEEP

48:qL/Khh3eQu/9PnzB9o+hsbgzesKb7iXxl/jFNwVXruU6h1k9QON/07CirJH2aE1Y:SGhuJfF9NhKvsrj+y/hueI8jrJW8

Score

1^/10

Malware Config

Signatures

Files

f03fc26279e13fee155460a2e1d07fd9a85439b19dbb1fe76923b6f5b5dbdcd8
.sys windows:10 windows x64

9de3a95801b9194112a0936d4bb8cdf9

Code Sign

77:94:18:51:48:19:a2:95:42:fd:e1:51:da:db:fd:6e
Certificate

Issuer

CN=WDKTestCert Admin\,133207284308755121

Not Before

13/02/2023, 02:20

Not After

13/02/2033, 00:00

Subject

CN=WDKTestCert Admin\,133207284308755121

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageKeyEncipherment
KeyUsageDataEncipherment

d0:92:91:ee:1a:51:36:42:2b:a6:a7:3c:46:f1:da:f3:e9:a7:e1:ad:19:e8:23:16:00:29:ed:c4:75:69:53:df
Signer

Actual PE Digest

d0:92:91:ee:1a:51:36:42:2b:a6:a7:3c:46:f1:da:f3:e9:a7:e1:ad:19:e8:23:16:00:29:ed:c4:75:69:53:df

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

KeDelayExecutionThread
ExAllocatePool
PsCreateSystemThread
PsTerminateSystemThread
ZwClose
DbgPrint

Sections

.text
Size: 512B - Virtual size: 473B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9de3a95801b9194112a0936d4bb8cdf9

Code Sign

77:94:18:51:48:19:a2:95:42:fd:e1:51:da:db:fd:6eCertificate

Extended Key Usages

Key Usages

d0:92:91:ee:1a:51:36:42:2b:a6:a7:3c:46:f1:da:f3:e9:a7:e1:ad:19:e8:23:16:00:29:ed:c4:75:69:53:dfSigner

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 512B - Virtual size: 473B

.rdata Size: 1024B - Virtual size: 972B

.data Size: 512B - Virtual size: 16B

.pdata Size: 512B - Virtual size: 72B

INIT Size: 512B - Virtual size: 322B

.reloc Size: 512B - Virtual size: 36B

77:94:18:51:48:19:a2:95:42:fd:e1:51:da:db:fd:6e
Certificate

d0:92:91:ee:1a:51:36:42:2b:a6:a7:3c:46:f1:da:f3:e9:a7:e1:ad:19:e8:23:16:00:29:ed:c4:75:69:53:df
Signer

.text
Size: 512B - Virtual size: 473B

.rdata
Size: 1024B - Virtual size: 972B

.data
Size: 512B - Virtual size: 16B

.pdata
Size: 512B - Virtual size: 72B

INIT
Size: 512B - Virtual size: 322B

.reloc
Size: 512B - Virtual size: 36B