D:\my\2008-05-13-Super-1\Super\KillProcess\objfre\i386\Driver.pdb
Static task
static1
1 signatures
General
-
Target
c7293bfaf1118915c0bc4eaba082ba93
-
Size
1KB
-
MD5
c7293bfaf1118915c0bc4eaba082ba93
-
SHA1
5a6b39a85a4b715b41ead1839ddbaa7edac399b3
-
SHA256
e2d99c683a70f71b5b68c41b66eae9eb2f019d44c96f63b21683408da303a396
-
SHA512
cf542301ca65870f4f8273721ca2f4fbb73cba66c2a14f7155f2860aad0a1480f26b143c9871bcdc3e675195c63b199cd1b6e1ad3989044ae2d6cd0c00901af7
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c7293bfaf1118915c0bc4eaba082ba93
Files
-
c7293bfaf1118915c0bc4eaba082ba93.sys windows:5 windows x86 arch:x86
a94f8faa78b398502ce6c362bc6011e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
ZwClose
ZwTerminateProcess
ZwOpenProcess
ZwQuerySystemInformation
ExAllocatePoolWithTag
ExFreePoolWithTag
Sections
.rdata Size: 256B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 128B - Virtual size: 3B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 512B - Virtual size: 490B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ