Remove
Setup
_DllMain@12
Static task
static1
1 signatures
General
-
Target
drvmgt.dll
-
Size
33KB
-
MD5
f067b3e660cebed6ac554fe0c9d7d17d
-
SHA1
1437c8c149917c76f741c6dbee6b6b0cc0664f13
-
SHA256
916b1767d80b932d5b05b24fd75294e27291fd9bceb9eb6d057df334f8679f6b
-
SHA512
954e0e998ff0aa8ac2caa6c7a983b7cb1313c738402d1f9c24d80bcfebc773ffd15a363da31fceb8697e336b1e941018e2d129726262148b4f5cb3da9a4d656a
-
SSDEEP
768:8eXrqhVJJDpQAONSfL1iheGOW0xYHgMP:PqbJP7ySf+eGex8g
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource drvmgt.dll
Files
-
drvmgt.dll.dll windows:4 windows x86 arch:x86
1905b559da5f8c299b90ec1e37f78696
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
DeleteFileA
Sleep
CopyFileA
GetSystemDirectoryA
lstrlenA
CreateFileA
GetLastError
DeviceIoControl
InitializeCriticalSection
TlsFree
TlsAlloc
HeapAlloc
SetFileAttributesA
GetFileAttributesA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
CloseHandle
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
HeapFree
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
SetStdHandle
SetFilePointer
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
WriteFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
FlushFileBuffers
user32
wsprintfA
advapi32
RegOpenKeyExA
OpenServiceA
RegEnumKeyExA
StartServiceA
OpenSCManagerA
QueryServiceStatus
DeleteService
CloseServiceHandle
CreateServiceA
GetSecurityDescriptorDacl
ControlService
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
GetAclInformation
QueryServiceObjectSecurity
SetServiceObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetAce
Exports
Exports
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ