F:\Build\Driver\Win11_Drivers\drivers\UWAcpiDriver\UWACPIDriver2\UWACPIDriverx64\Release\UWACPIDriver.pdb
Static task
static1
General
-
Target
7de3c880cb7c9408b36e9e823a4b7117a2f089852e5e2378ed270f9d3591f2b4
-
Size
24KB
-
MD5
07c2129643b37ec67a66c27232838cfe
-
SHA1
5a102cf3d0c40d3df67da5be7831aeffc5dd2696
-
SHA256
7de3c880cb7c9408b36e9e823a4b7117a2f089852e5e2378ed270f9d3591f2b4
-
SHA512
df232fe76ad80985ee5e590e6a0f98b946625881e8de8960fdd6d07d9079913db6eec040b51b5cdfc90f3c67c4f171fac5e1ba40403e5aaddcae1052256a9eaf
-
SSDEEP
384:QxQuxL4qF3DG/80gFmRUvwLg1Z5Lad/n1t7GQZScf0z3rpl:QxR4tqon1tD0cfgf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7de3c880cb7c9408b36e9e823a4b7117a2f089852e5e2378ed270f9d3591f2b4
Files
-
7de3c880cb7c9408b36e9e823a4b7117a2f089852e5e2378ed270f9d3591f2b4.sys windows:10 windows x64 arch:x64
f01e1990a206fe785af77a679de65148
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
ntoskrnl.exe
RtlCopyUnicodeString
RtlInitUnicodeString
IoWMIRegistrationControl
MmGetSystemRoutineAddress
DbgPrintEx
wpprecorder.sys
imp_WppRecorderReplay
WppAutoLogStart
WppAutoLogTrace
WppAutoLogStop
wdfldr.sys
WdfVersionUnbindClass
WdfVersionBindClass
WdfVersionUnbind
WdfLdrQueryInterface
WdfVersionBind
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 60B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ