native_driver[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

native_driver.dll
Size

14.1MB
MD5

f11012dd2ea16ff339dcf923868785d8
SHA1

b6116a87ca9fd1c289037f4e2c3e7f7745044478
SHA256

a7cf4ae6a0f06744b43b140acfbce556fdd933969451500b1adc1a31651fe54d
SHA512

c7f05a25d64e8f9ae358724e02ab54606de26b72f534fcb69925e66b8e7f6ed3c6211b288492e4fcf9aba16224e95e9cf02bf6c56b83c98aaa0ba360d8e82a8d
SSDEEP

393216:qSjyLkS3jLU1p6tUAc1t1F8OUWDacj5LDY1f:qS+Lkkj41p6tUAcb8TyjJs1f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
native_driver.dll

Files

native_driver.dll
.dll windows:6 windows x64 arch:x64

733fef0d755318ef6060394ddeffa602

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

Sleep
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

_CxxThrowException

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_crt_atexit

api-ms-win-crt-heap-l1-1-0

malloc

Exports

Exports

JNI_OnLoad

Sections

.text
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.<$m
Size: - Virtual size: 8.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.`7Z
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DO]
Size: 14.1MB - Virtual size: 14.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

733fef0d755318ef6060394ddeffa602

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: - Virtual size: 16KB

.rdata Size: - Virtual size: 6KB

.data Size: - Virtual size: 648KB

.pdata Size: - Virtual size: 984B

.<$m Size: - Virtual size: 8.3MB

.`7Z Size: 2KB - Virtual size: 2KB

.DO] Size: 14.1MB - Virtual size: 14.1MB

.reloc Size: 512B - Virtual size: 280B

.rsrc Size: 512B - Virtual size: 469B

.text
Size: - Virtual size: 16KB

.rdata
Size: - Virtual size: 6KB

.data
Size: - Virtual size: 648KB

.pdata
Size: - Virtual size: 984B

.<$m
Size: - Virtual size: 8.3MB

.`7Z
Size: 2KB - Virtual size: 2KB

.DO]
Size: 14.1MB - Virtual size: 14.1MB

.reloc
Size: 512B - Virtual size: 280B

.rsrc
Size: 512B - Virtual size: 469B