3330e662aef62be7ba8bd79ab4522023bd7947c96c300741d06454ddb7ed40a6

Sharing

Copy URL Twitter E-mail

General

Target

3330e662aef62be7ba8bd79ab4522023bd7947c96c300741d06454ddb7ed40a6
Size

7KB
MD5

7bb2dd082bf2c25fef09093597a40823
SHA1

3a41df46301987829864dc6a90d06a659e3b23bf
SHA256

3330e662aef62be7ba8bd79ab4522023bd7947c96c300741d06454ddb7ed40a6
SHA512

aad2a06179ba7dce06bb969943f83b2a5b3fd3c176c6fa4aaf8e5cb1d54e658767714f7ef6427e37bcc10b85934d65e4d44d46a514e8a09a8a846408bca9e948
SSDEEP

48:aivcxaldMBlrp2Oht8gXBhd1etQWkpfhsj+3zefRnCc9g7iRlsmaqfhMdwQuU6hU:X0BllttpXBpgkc60fZ/hueI8jrJpShf

Score

1^/10

Malware Config

Signatures

Files

3330e662aef62be7ba8bd79ab4522023bd7947c96c300741d06454ddb7ed40a6
.sys windows:10 windows x64

886792a95483064d0790d06c48e635ef

Code Sign

77:94:18:51:48:19:a2:95:42:fd:e1:51:da:db:fd:6e
Certificate

Issuer

CN=WDKTestCert Admin\,133207284308755121

Not Before

13/02/2023, 02:20

Not After

13/02/2033, 00:00

Subject

CN=WDKTestCert Admin\,133207284308755121

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageKeyEncipherment
KeyUsageDataEncipherment

e1:57:fd:5f:d5:c6:e3:60:a3:c9:37:87:57:d8:a5:67:2a:64:05:e8:8d:2a:07:cf:59:0d:f9:52:43:e4:1b:ed
Signer

Actual PE Digest

e1:57:fd:5f:d5:c6:e3:60:a3:c9:37:87:57:d8:a5:67:2a:64:05:e8:8d:2a:07:cf:59:0d:f9:52:43:e4:1b:ed

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
ObRegisterCallbacks
ObUnRegisterCallbacks
PsGetProcessId
PsProcessType

Sections

.text
Size: 1024B - Virtual size: 758B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

886792a95483064d0790d06c48e635ef

Code Sign

77:94:18:51:48:19:a2:95:42:fd:e1:51:da:db:fd:6eCertificate

Extended Key Usages

Key Usages

e1:57:fd:5f:d5:c6:e3:60:a3:c9:37:87:57:d8:a5:67:2a:64:05:e8:8d:2a:07:cf:59:0d:f9:52:43:e4:1b:edSigner

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 1024B - Virtual size: 758B

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 32B

.pdata Size: 512B - Virtual size: 96B

INIT Size: 512B - Virtual size: 416B

.reloc Size: 512B - Virtual size: 36B

77:94:18:51:48:19:a2:95:42:fd:e1:51:da:db:fd:6e
Certificate

e1:57:fd:5f:d5:c6:e3:60:a3:c9:37:87:57:d8:a5:67:2a:64:05:e8:8d:2a:07:cf:59:0d:f9:52:43:e4:1b:ed
Signer

.text
Size: 1024B - Virtual size: 758B

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 32B

.pdata
Size: 512B - Virtual size: 96B

INIT
Size: 512B - Virtual size: 416B

.reloc
Size: 512B - Virtual size: 36B