ipsec.pdb
Static task
static1
1 signatures
General
-
Target
cde9e4e75669239e87e416c89b84d079
-
Size
73KB
-
MD5
cde9e4e75669239e87e416c89b84d079
-
SHA1
95729475de5a1db9227c530e682cd257fd791ff2
-
SHA256
c26f52104b1c2bc11fce022ddeeb1cf72f951552d5ba129615bb54621b48d12e
-
SHA512
53848b63e0c431d8886f3260caee8ce97d8cb8a252a2922f0ccb3217b43e402666aa9d98645eea79238dfd6f5521b5c7666fd1043998aaca2598a95cb33c1197
-
SSDEEP
768:yOFn+koR1/KUJbxoki0pRsgFfin8x4Bu+7tstQACXn4RIcF55Sv1dw7MVRW44cfp:/nSRq5GbE8x4BZstQiFuuMe4f4
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cde9e4e75669239e87e416c89b84d079
Files
-
cde9e4e75669239e87e416c89b84d079.sys windows:5 windows x86 arch:x86
3b838288bb06dd95d5d887532fb636c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
hal
KfAcquireSpinLock
KfReleaseSpinLock
KfLowerIrql
ndis.sys
NdisCancelTimer
NdisWriteEventLogEntry
NdisSetTimer
NdisInitializeTimer
ntoskrnl.exe
KeWaitForSingleObject
IofCallDriver
IoBuildDeviceIoControlRequest
KeInitializeEvent
IoGetDeviceObjectPointer
IofCompleteRequest
KeQuerySystemTime
RtlExtendedIntegerMultiply
ZwClose
MmIsThisAnNtAsSystem
ExInitializeNPagedLookasideList
IoDeleteDevice
IoDeleteSymbolicLink
KeDelayExecutionThread
IoAcquireCancelSpinLock
IoCreateSymbolicLink
IoCreateDevice
KefReleaseSpinLockFromDpcLevel
KefAcquireSpinLockAtDpcLevel
ObfDereferenceObject
RtlAnsiStringToUnicodeString
RtlIntegerToUnicodeString
IoReleaseCancelSpinLock
KeTickCount
KeBugCheckEx
wcslen
IoAllocateErrorLogEntry
IoWriteErrorLogEntry
MmBuildMdlForNonPagedPool
MmSizeOfMdl
ExDeleteNPagedLookasideList
KeInitializeSpinLock
ExAllocatePoolWithTag
ExFreePoolWithTag
ZwQueryValueKey
RtlInitUnicodeString
ZwOpenKey
InterlockedPushEntrySList
memmove
ExQueueWorkItem
_allshl
MmMapLockedPagesSpecifyCache
ExInitializeResourceLite
ExDeleteResourceLite
ZwDeviceIoControlFile
ZwLoadDriver
ZwCreateFile
RtlSplay
RtlDelete
KeCancelTimer
_alldiv
KeSetTimerEx
KeInitializeTimer
KeInitializeDpc
KeQueryTimeIncrement
ExInterlockedAddLargeStatistic
InterlockedPopEntrySList
Sections
.text Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ