premtemp[.]sys | Triage™

General

Target
premtemp.sys
Size 7KB
Sample260722-ss7mlstygs
SHA256 7cf5a63f2756f0dbb34e27ae12171d6b0aa777da9dba6e49e3d043d2452496ed
MD5 d0d38845659d531bc306ed0ec70c5f1b
SHA1 87959726f8fd1c845d384e5c4f0c502aa406716c
SHA512 a2d7e861df952779be6fd2f14502e5cbb0a377bfa5df9718e8d66579e77e772b1fd73a330e95e9f5f722e36b2b65225ec5ba6ce8b239e4173232718ad629b052
SSDEEP 96:+nkQEptIo6CkCTZuZseXpMt154CoJDso7q/8SHWj7GyuubMmLnYsR:WkQE0CtTQfXpM3547FsstYcPYY
TLSH
T162F1F82A752504DAF3A9853BC0135A8FA2B5B4015767EFDF9A3991740727B82323FB81
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
premtemp.sys

IMPHASH 80da6862fa1401c2cac4b502d55c1d80
SHA256 7cf5a63f2756f0dbb34e27ae12171d6b0aa777da9dba6e49e3d043d2452496ed
MD5 d0d38845659d531bc306ed0ec70c5f1b
SHA1 87959726f8fd1c845d384e5c4f0c502aa406716c
SHA512 a2d7e861df952779be6fd2f14502e5cbb0a377bfa5df9718e8d66579e77e772b1fd73a330e95e9f5f722e36b2b65225ec5ba6ce8b239e4173232718ad629b052
SSDEEP 96:+nkQEptIo6CkCTZuZseXpMt154CoJDso7q/8SHWj7GyuubMmLnYsR:WkQE0CtTQfXpM3547FsstYcPYY
TLSH
T162F1F82A752504DAF3A9853BC0135A8FA2B5B4015767EFDF9A3991740727B82323FB81
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

10

Entry point

5460

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Riley\source\repos\premtemp\Build\premtemp.pdb