scsiscan.pdb
Static task
static1
1 signatures
General
-
Target
c67cb0ba2a9714912ab7e3900bda5ec35544a6baaaa2c95f4a17e8b24e4e518d
-
Size
11KB
-
MD5
6f8b80d50d3185e1f8d9a5612d4b0274
-
SHA1
1d445879bc759ff851d32f09d0c87c0c38d3f925
-
SHA256
c67cb0ba2a9714912ab7e3900bda5ec35544a6baaaa2c95f4a17e8b24e4e518d
-
SHA512
8af7b2d280ed951fde1f6c07d88f1a4537457edc5994c40a4c729d06316a0b212a6357c416f1940ca90652c924492888914ab224ba90fce87cec358f77f66d6e
-
SSDEEP
192:PNaRHRY97maFzNOry9BZCApO1IhnlUoGlqI+4nFNbSMeFMIXP2uOWYZWJf:PNAH297TFgyJdhlNI+aqMsuuOWYZWJ
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c67cb0ba2a9714912ab7e3900bda5ec35544a6baaaa2c95f4a17e8b24e4e518d
Files
-
c67cb0ba2a9714912ab7e3900bda5ec35544a6baaaa2c95f4a17e8b24e4e518d.sys windows:5 windows x86 arch:x86
7ae4d64a4a72283d8eccf7615dbdb201
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
KeInitializeEvent
ExAllocatePoolWithTag
_except_handler3
IoWriteErrorLogEntry
IoAllocateErrorLogEntry
IoAllocateIrp
IoFreeIrp
IoFreeMdl
MmUnlockPages
ZwSetValueKey
RtlInitUnicodeString
IoOpenDeviceRegistryKey
RtlFreeUnicodeString
IoCreateSymbolicLink
RtlAnsiStringToUnicodeString
RtlInitAnsiString
sprintf
ZwClose
IoDeleteSymbolicLink
InterlockedIncrement
IoBuildDeviceIoControlRequest
InterlockedDecrement
PoCallDriver
PoStartNextPowerIrp
IoSetDeviceInterfaceState
IoRegisterDeviceInterface
IoDeleteDevice
IoAttachDeviceToDeviceStack
IoCreateDevice
IoDetachDevice
IofCompleteRequest
MmProbeAndLockPages
MmCreateMdl
InterlockedExchange
MmMapLockedPages
InterlockedCompareExchange
ZwQueryValueKey
ZwOpenKey
KeTickCount
KeBugCheckEx
IofCallDriver
KeWaitForSingleObject
KeSetEvent
ExFreePool
hal
KfRaiseIrql
KfLowerIrql
KeGetCurrentIrql
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PAGE Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 498B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ