Overview

overview

3

Static

static

3

bypass.sys

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    bypass.sys
  • Size 12KB
  • Sample260522-efl89ady2m
  • SHA256 29e2a53cbd83ccd113a114e05ef85510f2fcd7fd12962e99014915f0e0d31b29
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • bypass.sys
    .sys 12KB

bypass.sys

  • IMPHASH 44e4f58f8ba9c6a4ff4d4684876e4178
  • SHA256 29e2a53cbd83ccd113a114e05ef85510f2fcd7fd12962e99014915f0e0d31b29
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:10windowsx64arch:x64

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
e5:e7:53:96:91:4d:fc:89:8f:ef:f6:90:06:42:d6:37:7b:84:88:49:10:3d:3d:c9:5d:a3:dd:e9:81:42:8c:75
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=WDKTestCert gamga\,134229124671329393
Minor OS version
0
Major OS version
10
Entry point
6048
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_NATIVE
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
D:\revers shell\bypass-b\x64\Release\bypass-b.pdb