x865Craddrvv3[.]sys

General

Target
x865Craddrvv3.sys
Size 67KB
Sample260907-2gebcsxake
SHA256 5fd714bf7f881d3c48f7a9ec11a7b882465f035b4b6b01e878bd9b57529ae1c9
MD5 2bf6757a65b19e75862f8fd60db40da9
SHA1 29881959d50e0574fc281682371e5d0dc75a18a6
SHA512 d068ded55c5f78a93ba6d7a4bf819cffc7299677a53f2b21efd98fb0a8437457236a281b21f782ff2c129eb36d8825622ac4299888c2736d22cfddac9495150a
SSDEEP 768:zDMGUzf9rfiFyr/9t0INx9V1Oes+w7oMjkPcpm0XkgTncriYkRCSF9cQRbm3whla:zZUT9fiFyxbx9VKk4mqjU4mghlMTf
TLSH
T107635C82A79C3132DCD259B05298F2779EBAE7F10B5F96E753644DC15CA1BC06F2820B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
x865Craddrvv3.sys

File Explorer

x865Craddrvv3.sys

.sys 67KB

x865Craddrvv3.sys

IMPHASH b2844cbbb8c7476ba67fb4c39ed06208
SHA256 5fd714bf7f881d3c48f7a9ec11a7b882465f035b4b6b01e878bd9b57529ae1c9
MD5 2bf6757a65b19e75862f8fd60db40da9
SHA1 29881959d50e0574fc281682371e5d0dc75a18a6
SHA512 d068ded55c5f78a93ba6d7a4bf819cffc7299677a53f2b21efd98fb0a8437457236a281b21f782ff2c129eb36d8825622ac4299888c2736d22cfddac9495150a
SSDEEP 768:zDMGUzf9rfiFyr/9t0INx9V1Oes+w7oMjkPcpm0XkgTncriYkRCSF9cQRbm3whla:zZUT9fiFyxbx9VKk4mqjU4mghlMTf
TLSH
T107635C82A79C3132DCD259B05298F2779EBAE7F10B5F96E753644DC15CA1BC06F2820B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

40069

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

u:\users\dmitry\projects.radminv3x\myutil\raddrv\objfre_w2K_x86\i386\raddrvv3.pdb

Name

.text

Size

29KB

Virtual Size

29KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

896B

Virtual Size

876B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

PAGE

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

INIT

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

x865Craddrvv3.sys

ntoskrnl.exe

hal

generic

Sharing

General

Malware Config

Signatures

File Explorer

x865Craddrvv3.sys

ntoskrnl.exe

hal

generic