General

  • Target
    lansvcwdk.sys
  • Size 16KB
  • Sample260505-avx7vaet21
  • SHA256 fa033fb497a715fc14f9152d50be01ebf431907eb32ffaa12f911f9aeab75687
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • lansvcwdk.sys
    .sys 16KB

lansvcwdk.sys

  • IMPHASH 11af0e1f329159e411ba1ae774d0a858
  • SHA256 fa033fb497a715fc14f9152d50be01ebf431907eb32ffaa12f911f9aeab75687
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
6b:ef:25:1a:c6:48:c4:53:97:c4:66:d6:ad:fa:dd:fb:0e:6b:a5:76
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Henan Pushitong Intelligent Technology Co.\, Ltd.,O=Henan Pushitong Intelligent Technology Co.\, Ltd.,L=Zhengzhou,ST=Henan,C=CN
Minor OS version
0
Major OS version
10
Entry point
4224
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths