017afe9722559dd4f1d239be5b0747f677eb80103be4d908e30fd9c90bbc86c2

Sharing

Copy URL Twitter E-mail

General

Target

017afe9722559dd4f1d239be5b0747f677eb80103be4d908e30fd9c90bbc86c2
Size

8KB
MD5

e68d26b84587f5e1b12fe67d343ad4d1
SHA1

d989782d4dac00d819663dc9e38012688f92a8fe
SHA256

017afe9722559dd4f1d239be5b0747f677eb80103be4d908e30fd9c90bbc86c2
SHA512

42fa5f982b2a0ce0d997b151baec9cb5b4de213365795c7495f17c26771ee0188f214eec104a5edc560882870fbd16216202229fdc5ef4748b56e71fcf7c2d7d
SSDEEP

96:r6cdeU9rFbFqYzwhw6AwVxRcG0yLJv1IFEw6tF5O:r6CeCrOwO/S5U1Iew6tFU

Score

1^/10

Malware Config

Signatures

Files

017afe9722559dd4f1d239be5b0747f677eb80103be4d908e30fd9c90bbc86c2
.sys windows:10 windows x64 arch:x64

bcb603104b616c29cbfcdbb4ab36e3df

Code Sign

48:78:49:a0:e9:1c:1b:ab:47:ec:15:c4:c5:2c:5a:e9
Certificate

Issuer

CN=WDKTestCert as255\,133411384865653602

Not Before

07/10/2023, 07:48

Not After

07/10/2033, 00:00

Subject

CN=WDKTestCert as255\,133411384865653602

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageKeyEncipherment
KeyUsageDataEncipherment

1d:57:c3:1a:88:03:de:e2:fd:d2:98:a9:7e:6c:04:da:d2:81:a4:71
Signer

Actual PE Digest

1d:57:c3:1a:88:03:de:e2:fd:d2:98:a9:7e:6c:04:da:d2:81:a4:71

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

ntoskrnl.exe

IoCreateDevice
MmUnmapIoSpace
IoDeleteDevice
IoDeleteSymbolicLink
__C_specific_handler
MmMapIoSpace
IoCreateSymbolicLink
IofCompleteRequest
RtlInitUnicodeString

hal

HalGetBusDataByOffset
HalSetBusDataByOffset

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

INIT
Size: 1024B - Virtual size: 570B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bcb603104b616c29cbfcdbb4ab36e3df

Code Sign

48:78:49:a0:e9:1c:1b:ab:47:ec:15:c4:c5:2c:5a:e9Certificate

Extended Key Usages

Key Usages

1d:57:c3:1a:88:03:de:e2:fd:d2:98:a9:7e:6c:04:da:d2:81:a4:71Signer

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

hal

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 20B

.pdata Size: 512B - Virtual size: 144B

INIT Size: 1024B - Virtual size: 570B

.reloc Size: 512B - Virtual size: 20B

48:78:49:a0:e9:1c:1b:ab:47:ec:15:c4:c5:2c:5a:e9
Certificate

1d:57:c3:1a:88:03:de:e2:fd:d2:98:a9:7e:6c:04:da:d2:81:a4:71
Signer

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 20B

.pdata
Size: 512B - Virtual size: 144B

INIT
Size: 1024B - Virtual size: 570B

.reloc
Size: 512B - Virtual size: 20B