tdpipe.pdb
Static task
static1
1 signatures
General
-
Target
8c3fb1892e9082848e75460e22b4d1a6
-
Size
22KB
-
MD5
8c3fb1892e9082848e75460e22b4d1a6
-
SHA1
48cd5d50db4654bdf024e6fa8201a78b1f5b7eae
-
SHA256
b8ce12befbee7036a41ff312d4f911cfdb61df93b534b86c68f8f56e6818a36a
-
SHA512
eefddf38c30bc7041fc7bd7e620d5a763e41015c51ab2b7699b138ffcd1c915326b98c66e2c47b1cad6a9828603e5830e294e3dc4d881e4ff297a089fe13ae24
-
SSDEEP
384:eseTaFqAB2j4CNstVeQGhaWG8nIWCFKq02F45ozRC/xFFt01Q3/LLiolJGKJWG86:3eTaFLB24CNqRmnqKq3U/xl01Q3/yo7n
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8c3fb1892e9082848e75460e22b4d1a6
Files
-
8c3fb1892e9082848e75460e22b4d1a6.sys windows:5 windows x86 arch:x86
be34ffb3683edbc99c5b6becf288cad2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
KeTickCount
ZwCreateFile
ZwFsControlFile
IoFileObjectType
ObReferenceObjectByPointer
IoGetCurrentProcess
IoGetRelatedDeviceObject
ObfDereferenceObject
ZwClose
wcslen
IofCallDriver
MmBuildMdlForNonPagedPool
_except_handler3
IoDeleteDevice
IofCompleteRequest
IoCreateDevice
RtlInitUnicodeString
wcscat
wcscpy
KeInitializeEvent
KeInitializeSpinLock
DbgPrint
KeGetCurrentThread
KeResetEvent
KeSetEvent
IoFreeMdl
MmUnlockPages
IoSetCompletionRoutineEx
IoInitializeIrp
MmSizeOfMdl
IoCancelIrp
KeClearEvent
ObfReferenceObject
ExfInterlockedInsertTailList
NtSetInformationThread
MmIsNonPagedSystemAddressValid
IoCreateFile
ObReferenceObjectByHandle
termdd.sys
IcaRawInput
IcaChannelInput
IcaBufferFree
IcaBufferError
IcaCreateThread
IcaAllocateWorkItem
IcaQueueWorkItemEx
IcaStackAllocatePool
IcaCloseHandle
IcaCreateHandle
IcaStackFreePool
IcaWaitForSingleObject
IcaStackAllocatePoolWithTag
hal
KfAcquireSpinLock
KfReleaseSpinLock
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lqih Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 384B - Virtual size: 384B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ