E:\code\WifiDriverWindows\aicloadfw\sys\x64\Debug\aicloadfw.pdb
Static task
static1
1 signatures
General
-
Target
ae048f3416d0f7d4f816b1892813c6f6107f05c6cf39fc61b73ef75904fbeb9d
-
Size
384KB
-
MD5
532271d960708f934be8426e6ebcb2f4
-
SHA1
8b5208e5918a61d1716e2d505384bba5fe5f207f
-
SHA256
ae048f3416d0f7d4f816b1892813c6f6107f05c6cf39fc61b73ef75904fbeb9d
-
SHA512
afdd85eab36e817f421898f5ee7fe3f521ffbba7d06677a54d9a4d3be354103178b813e1025810882451add6e37abfa29ca6ba8df4fcf657ff79377f1fb9d913
-
SSDEEP
6144:+hNsnmOynJaZVktZ5rsybk83Hq6+QcmFncTq9a48DwHLEr05nmcdcPu5:+ngmfIWtZRsybJKrmFnUXDPWK
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae048f3416d0f7d4f816b1892813c6f6107f05c6cf39fc61b73ef75904fbeb9d
Files
-
ae048f3416d0f7d4f816b1892813c6f6107f05c6cf39fc61b73ef75904fbeb9d.sys windows:10 windows x64 arch:x64
be1fb42f393eed7fd90779e333b001ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
ntoskrnl.exe
RtlAssert
RtlInitUnicodeString
RtlGetVersion
MmGetSystemRoutineAddress
MmFreeNonCachedMemory
ExAllocatePoolWithTag
KeBugCheckEx
MmAllocateNonCachedMemory
ExFreePoolWithTag
KeWaitForSingleObject
RtlCopyUnicodeString
RtlAnsiCharToUnicodeChar
KeReleaseSemaphore
KeInitializeSemaphore
IoWMIRegistrationControl
DbgPrint
hal
KeQueryPerformanceCounter
wdfldr.sys
WdfVersionBind
WdfVersionUnbind
WdfVersionUnbindClass
WdfVersionBindClass
Sections
.text Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 339KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
PAGE Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
INIT Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 80B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ