9b69c2eadc3ddf719ad377f73c8b6d1cc00b74a92774f63750fcba41b05d19d3

General

Target
9b69c2eadc3ddf719ad377f73c8b6d1cc00b74a92774f63750fcba41b05d19d3
Size 12KB
Sample261014-r18n7sev21
SHA256 9b69c2eadc3ddf719ad377f73c8b6d1cc00b74a92774f63750fcba41b05d19d3
MD5 ed6de9b90af7ae70aecf2b88cb8d5587
SHA1 275b934fb92907f7c3f388fa798da5e3d92aa7e3
SHA512 f1ffa70a9bbc365932a608213e5ff492fb3dcde83879d6f47c7c448a793e2fb1642e4b3d7313d71289121464001538b5873c3efaa206c684120f3efe85aabb83
SSDEEP 192:rCTEpHXRuzW0y+Hf76EqBlf/ualaDsCKNwYcAH63ehFH1Wn+hPC0:hpHhqW0ZGBlf/uaIQbNw5m63cFVo8P
TLSH
T113421B5E332900FAE637117ED1A2056AE6F9F6216323CACF0776816A0F137D0563D7A6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b69c2eadc3ddf719ad377f73c8b6d1cc00b74a92774f63750fcba41b05d19d3

File Explorer

9b69c2eadc3ddf719ad377f73c8b6d1cc00b74a92774f63750fcba41b05d19d3

.sys 12KB

9b69c2eadc3ddf719ad377f73c8b6d1cc00b74a92774f63750fcba41b05d19d3

IMPHASH 474f5decbbb8801eca0353f594345fe5
SHA256 9b69c2eadc3ddf719ad377f73c8b6d1cc00b74a92774f63750fcba41b05d19d3
MD5 ed6de9b90af7ae70aecf2b88cb8d5587
SHA1 275b934fb92907f7c3f388fa798da5e3d92aa7e3
SHA512 f1ffa70a9bbc365932a608213e5ff492fb3dcde83879d6f47c7c448a793e2fb1642e4b3d7313d71289121464001538b5873c3efaa206c684120f3efe85aabb83
SSDEEP 192:rCTEpHXRuzW0y+Hf76EqBlf/ualaDsCKNwYcAH63ehFH1Wn+hPC0:hpHhqW0ZGBlf/uaIQbNw5m63cFVo8P
TLSH
T113421B5E332900FAE637117ED1A2056AE6F9F6216323CACF0776816A0F137D0563D7A6
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

10

Entry point

4512

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_NATIVE

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

G:\related_c\work_space\MyDriverProject\x64\Release\DisplayIconSys.pdb

Name

.text

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

512B

Virtual Size

432B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

INIT

Size

1024B

Virtual Size

1002B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

36B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

9b69c2eadc3ddf719ad377f73c8b6d1cc00b74a92774f63750fcba41b05d19d3

ntoskrnl.exe

wdfldr.sys

generic

Sharing

General

Malware Config

Signatures

File Explorer

9b69c2eadc3ddf719ad377f73c8b6d1cc00b74a92774f63750fcba41b05d19d3

ntoskrnl.exe

wdfldr.sys

generic