wmiacpi.pdb
Static task
static1
1 signatures
General
-
Target
971ba59ca48c8b3fb429a8868c63afe9
-
Size
8KB
-
MD5
971ba59ca48c8b3fb429a8868c63afe9
-
SHA1
f88f3e1653a20df303f87fe782ca9cdc5f28d05e
-
SHA256
df1a73a5d0dec182b850951a9830215e98699d13f8d5711931e153f955220e10
-
SHA512
a5422d4ab4861cd2e1ff9eada23b74831066921b6b724b171c10d50111f263e023dd70ac8130a87605b856cded86a956a328585521845d2c46ed3743140ed9de
-
SSDEEP
192:HQ4VZaHDRUF21MfD08z8fWQuOtWZvn4tHGHxgLa0O1:Hvn4VUFWM48Y5uOSn6HGRga08
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 971ba59ca48c8b3fb429a8868c63afe9
Files
-
971ba59ca48c8b3fb429a8868c63afe9.sys windows:5 windows x86 arch:x86
7d2f935dd2d234d65d3dfceb139e66c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
IofCallDriver
ExFreePool
IoFreeIrp
ObfDereferenceObject
IoAllocateIrp
IoGetAttachedDeviceReference
ExQueueWorkItem
ExAllocatePoolWithTag
KeWaitForSingleObject
IoBuildDeviceIoControlRequest
KeInitializeEvent
RtlxAnsiStringToUnicodeSize
IoWMIRegistrationControl
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlxUnicodeStringToAnsiSize
RtlInitUnicodeString
IoDeleteDevice
IoDetachDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
RtlCopyUnicodeString
KeTickCount
PoStartNextPowerIrp
PoCallDriver
NlsMbCodePageTag
IofCompleteRequest
wmilib.sys
WmiSystemControl
WmiCompleteRequest
WmiFireEvent
Sections
.text Size: 768B - Virtual size: 748B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 384B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ