C:\Users\Salty78\Desktop\Windows Driver DX12\build\driver\driver.pdb
Static task
static1
1 signatures
General
-
Target
c895feb2fe94caa7c5b3f3819f6a1078d32fa0964955909f4845b0cc321e8eb9.exe
-
Size
8KB
-
MD5
92b6f393d2d62df282a5da2e9b1f6b8d
-
SHA1
9b7697cb0a9cd30fef3d74db6fa8cb2bff88967f
-
SHA256
c895feb2fe94caa7c5b3f3819f6a1078d32fa0964955909f4845b0cc321e8eb9
-
SHA512
86f4cf48b6332398d0e36c104f3346c1359e5c9a886e578d4e1d33b375913a764232547eb0eb3b8f5e4872de91286179fbab0d4c4363e7bd156f169395d1d169
-
SSDEEP
96:Zu3i5n9XBe2hfXlsqjJ/5O2axnoLsW8qON4Jfs3siDL0jC4ADGAr:ZuEE2dlzl/5OrqsWvOeZ+5kXk
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c895feb2fe94caa7c5b3f3819f6a1078d32fa0964955909f4845b0cc321e8eb9.exe
Files
-
c895feb2fe94caa7c5b3f3819f6a1078d32fa0964955909f4845b0cc321e8eb9.exe.sys windows:10 windows x64 arch:x64
7e3e67cb95d976aa5dac9e8741575df1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
ntoskrnl.exe
RtlInitUnicodeString
DbgPrintEx
ExAllocatePool
ExFreePoolWithTag
IofCompleteRequest
IoCreateDevice
IoCreateSymbolicLink
IoDeleteDevice
IoDeleteSymbolicLink
ObfDereferenceObject
MmGetPhysicalMemoryRanges
MmCopyMemory
MmGetVirtualForPhysical
MmIsAddressValid
PsLookupProcessByProcessId
IoCreateDriver
PsGetProcessSectionBaseAddress
ZwQuerySystemInformation
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 168B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ