framework_sensors_0.0.0.6_EVCert_Debug.zip
- SHA256 0a458bdcba66fe2081aa0d9bd954055e0b57896fe7cebff068add7ddffa444c2
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
framework_sensors_0.0.0.6_EVCert_Debug/FrameworkSensors.dll
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
framework_sensors_0.0.0.6_EVCert_Debug/install_frameworksensors.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
framework_sensors_0.0.0.6_EVCert_Debug/install_frameworksensors.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
7 signatures
150 seconds
General
- Target framework_sensors_0.0.0.6_EVCert_Debug.zip
- Size 320KB
- Sample261102-nywp3seh58
- SHA256 0a458bdcba66fe2081aa0d9bd954055e0b57896fe7cebff068add7ddffa444c2
- MD5 bf8c0efa0af957dbc0eecb68c941cdd8
- SHA1 2a19ea76134f2a854ce39ae120b4223c2e400d9d
- SHA512 cd014c9bca3def4ad1efd9553ea1c743327c6455812023a09aaf1488660a268e04250587292dae88338f5d2da7449c16ad10cc464534302da56b675546913cb9
- SSDEEP 6144:TwkFY0G+fxIIFojEB6ElV3np5jOS6ZeDcszJJilB5nTt+8jqaQQK:4+flPBl73p5jqUPJilB5Tt+8j5FK
- TLSH T1D064238DA6680C2BCA7A5B69E0F9740DECE480FEB383D6EF20455A117E17246C257F47
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/framework_sensors_0.0.0.6_EVCert_Debug/FrameworkSensors.dll
File Explorer
-
framework_sensors_0.0.0.6_EVCert_Debug.zip.zip 320KB
-
framework_sensors_0.0.0.6_EVCert_Debug/FrameworkSensors.dll.dll 64KB
-
framework_sensors_0.0.0.6_EVCert_Debug/FrameworkSensors.inf4KB
-
framework_sensors_0.0.0.6_EVCert_Debug/FrameworkSensors.pdb1.3MB
-
framework_sensors_0.0.0.6_EVCert_Debug/frameworksensors.cat8KB
-
framework_sensors_0.0.0.6_EVCert_Debug/install_frameworksensors.bat878B
framework_sensors_0.0.0.6_EVCert_Debug/FrameworkSensors.dll
- IMPHASH 73581b75acc127f323e99281aa076367
- SHA256 7c1d0d54f02c156085fba667c8b307f00aca82f17060531286d0559f4dc7f564
- MD5 378cf730d4cb42f3ce4a31d88b4379e3
- SHA1 5712098c793a682bc2f1a5cf84938fcb7ced1eb5
- SHA512 469f03fe957600b771b12616c61d9f460e2cadacdbc7be7b5954832274c704a71d6b2c3c145ee3c46e1a1c9fd94c46e65064441d990611ad4a903398a647b8e7
- SSDEEP 768:Hb9ZaITnu25tva3iyxNWPQakN3KSZ1W0JVEWjaD+JSksVkJs7DEKDa:VTu0/yxN+NjA1ZJVowxGDEKDa
- TLSH T14753B54ED3952096E47CC3B786A30576607FB8058B38ABC7578D22790F827C0897E3DA
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
90:7a:e4:42:9e:08:d3:7e:ef:4b:50:72:94:be:ad:5f:61:f3:c9:b3:38:8a:ca:8c:f8:ed:61:59:62:18:f0:bc
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=WDKTestCert Daniel\,133720793442273543
Chains
Oct 26, 2026
CN=WDKTestCert Daniel\,133720793442273543
Subject
CN=WDKTestCert Daniel\,133720793442273543
Serial Number
4f:fc:7b:bc:ec:1f:3a:88:4b:89:50:4d:bc:66:aa:d4
Issuer
CN=WDKTestCert Daniel\,133720793442273543
Key Usages
KeyUsageKeyEncipherment, KeyUsageDataEncipherment
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Sep 29, 2024 - Sep 29, 2034
Minor OS version
0
Major OS version
10
Entry point
43488
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Daniel\clone\framework-win-sensor-driver\FrameworkSensors\x64\Debug\FrameworkSensors.pdb
ntdll
RtlUnwindEx
DbgPrintEx
kernel32
GetLastError
SetLastError
CreateFileW
DeviceIoControl
FlsAlloc
GetSystemTimePreciseAsFileTime
FlsGetValue
InterlockedFlushSList
FlsFree
InitializeSListHead
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
FlsSetValue
DeleteCriticalSection
InitializeCriticalSectionEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ole32
CoTaskMemAlloc
propsys
InitPropVariantFromFileTime
InitPropVariantFromCLSID
advapi32
GetTraceEnableLevel
GetTraceLoggerHandle
UnregisterTraceGuids
RegisterTraceGuidsW
TraceMessage
GetTraceEnableFlags
winmm
timeEndPeriod
sensorsutilsv2
IsKeyPresentInPropertyList
InitPropVariantFromFloat
GetPerformanceTime
PropertiesListCopy
PropKeyFindKeySetPropVariant
PropKeyFindKeyGetFloat
CollectionsListGetMarshalledSize
CollectionsListCopyAndMarshall
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo
_errno
abort
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
terminate
_cexit
api-ms-win-crt-heap-l1-1-0
free
calloc
FxDriverEntryUm
Name
.text
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=5, id=259, version=34321,
count=9, id=260, version=34321,
count=31, id=261, version=34321,
count=1, id=261, version=33140,
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=257, version=33138,
count=78, id=1, productName=Unmarked objects,
count=2, id=263, version=33140,
count=3, id=259, version=33140,
count=2, id=260, version=33140,
count=7, id=261, version=34436,
count=1, id=256, version=34436,
count=1, id=258, version=34436,
framework_sensors_0.0.0.6_EVCert_Debug/FrameworkSensors.inf
- SHA256 d3d2f2e73fc2e45d94a434ed06e5247bbe10a59d31a4c57f9efdf8cfdf689f15
- MD5 50a7d6bcd75c1ce931670c488d02991b
- SHA1 43eedfb497b3fde5485b4a552dc8ae061f58d169
- SHA512 714c552a5aabc6dd5e8cd73af4d1d246b41e67577e90f64ac3f153d3a26c58afe6221c8fd9e1085fa06eb12886889013c8166f27f49a72138e76eaacf8dcddef
- SSDEEP 48:1OcKGNuXuSXi24kMNJvptNJmNtVXNcN9NgNfuNaNzNVNut+XI7N7sN92NIN8wNjw:28Bk45txO7lUvTZ
- TLSH T178912E1253FA0A04F0B65E40AAB594669A337D946D399B4C03DC510A27FFE84D9B2FA3
- MD5 SHA1 SHA512 SSDEEP TLSH
framework_sensors_0.0.0.6_EVCert_Debug/FrameworkSensors.pdb
- SHA256 e1174fc35d9447debf41cc12c9b2281759082f60eca527bc5bfde19e06880862
- MD5 fa95bf4fb51a78e0c6d791915c5300e8
- SHA1 df39a408bc68bb53c473f326aad4487798368971
- SHA512 ab7f5053fb7a43700f72defdda5716849f5824b31d6041c47584ec8985e1fce6b4a9974cade5a61c6fccf08c658f99c4f457d0a73ffaa0aa76bd6d33b50705e5
- SSDEEP 12288:D/JCzd92YspOP07lGgKv7sraoYQ/K/JhA/J6:D/J2d92YSC07lGgcQ/K/J6/J6
- TLSH T12D559D27776C9D32C90A477E901B5F5D23C8CD02A7CA6BA35640F7A96CFA3448F5E242
- MD5 SHA1 SHA512 SSDEEP TLSH
framework_sensors_0.0.0.6_EVCert_Debug/frameworksensors.cat
- SHA256 7261ec2704367045012989d5a606052ff00e5551a354001fe83de3c8aa85bc3c
- MD5 e5bf0e8065b175c8cc82bb7586ed1da9
- SHA1 d51fe930adc04c11f0e2ea71850e0f168955074e
- SHA512 38fc7b91a256a86ad9aff9a240c3c03c50871a78f3469318413b54010a06b0cb46aad40d5fd175b25738cfd67a54ebe092dc5a670da67b007dfa9e42caa8651d
- SSDEEP 192:Igc+hfe3IUwlfBC81fjJFQ/hei3i64m/kVf:CwlJC87FChCm/kVf
- TLSH T145022AE35E1E4191ED838F60F4C0A81BEC736ECA954460EA705BA6195CC4BD07E2F43E
- MD5 SHA1 SHA512 SSDEEP TLSH
framework_sensors_0.0.0.6_EVCert_Debug/install_frameworksensors.bat
- SHA256 a91a752c9917b941158a951ef097007940f59b84a51bbec814a517c6c55aed4a
- MD5 ec056f242515712450dbb05f1ed957b0
- SHA1 35a2551524e48dd55f89322b5439b85f4e886bdc
- SHA512 297b1af926e5799081c0e010ee599a3917b8a71c75ec02979e419e1dc6e303acd48fd72aa52234264c1778911a08d261f9391e6e21d5fd021eb523854fcbafc2
- TLSH T119115C090C8686322272D2B0D7272540F66EF1073C2848B4F56361A49DFA2849BFD6D9
- MD5 SHA1 SHA512 TLSH