3a3412979341533e24fbc6405f2656ba

Sharing

Copy URL Twitter E-mail

General

Target

3a3412979341533e24fbc6405f2656ba
Size

90KB
MD5

3a3412979341533e24fbc6405f2656ba
SHA1

50cb1aafd5d7cbe617022a9bf969a554ebbf6771
SHA256

e2f75e24818fe86afa189512d61eeead08d2a476ebb046b7cb7316c587a8e76c
SHA512

fc731379f468a98d4b23183525d55c8e03b68ef102732e64b00614165c9018faf6ec0b38681ce32f30ed411eaf67aa2f6521d48a09dcddd0caa267bad1ebfe7d
SSDEEP

1536:rkcnNCFVIkyPss5vNMsySPgS0Hhk4n37:9NCfdyPVpNMsgSC/

Score

1^/10

Malware Config

Signatures

Files

3a3412979341533e24fbc6405f2656ba
.sys windows:6 windows x86 arch:x86

5e5b9cfe9dd50652c4e7d0b33468beaf

Code Sign

4c:f8:43:a0:cb:5b:a5:b5:43:f6:42:0b:6a:ac:eb:18
Certificate

Issuer

CN=WDKTestCert asdiop\,130986112583171794

Not Before

30/01/2016, 07:07

Not After

30/01/2026, 00:00

Subject

CN=WDKTestCert asdiop\,130986112583171794

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageKeyEncipherment
KeyUsageDataEncipherment

01:67:ca:dd:dc:69:f1:a3:dd:11:6e:c5:1e:db:99:90:87:1d:4f:e0
Signer

Actual PE Digest

01:67:ca:dd:dc:69:f1:a3:dd:11:6e:c5:1e:db:99:90:87:1d:4f:e0

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntoskrnl.exe

KeDelayExecutionThread
PsCreateSystemThread
PsTerminateSystemThread
ZwClose
DbgPrint

Sections

.text
Size: 512B - Virtual size: 196B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

INIT
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e5b9cfe9dd50652c4e7d0b33468beaf

Code Sign

4c:f8:43:a0:cb:5b:a5:b5:43:f6:42:0b:6a:ac:eb:18Certificate

Extended Key Usages

Key Usages

01:67:ca:dd:dc:69:f1:a3:dd:11:6e:c5:1e:db:99:90:87:1d:4f:e0Signer

Headers

DLL Characteristics

File Characteristics

Imports

ntoskrnl.exe

Sections

.text Size: 512B - Virtual size: 196B

.rdata Size: 512B - Virtual size: 320B

.data Size: 512B - Virtual size: 8B

INIT Size: 512B - Virtual size: 252B

.reloc Size: 512B - Virtual size: 64B

4c:f8:43:a0:cb:5b:a5:b5:43:f6:42:0b:6a:ac:eb:18
Certificate

01:67:ca:dd:dc:69:f1:a3:dd:11:6e:c5:1e:db:99:90:87:1d:4f:e0
Signer

.text
Size: 512B - Virtual size: 196B

.rdata
Size: 512B - Virtual size: 320B

.data
Size: 512B - Virtual size: 8B

INIT
Size: 512B - Virtual size: 252B

.reloc
Size: 512B - Virtual size: 64B