stub[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

stub.exe
Size

281KB
MD5

1a91837ed63cc9b63812a76614b15075
SHA1

ec1f4a9e91086a57ccccbd32793ef5fc49bd35df
SHA256

e35e727457a1d1f14cd926e98bad3b3772ce405ab9e66501c6e188e631b0040c
SHA512

bf82ccfa23a1bdb0b29140807c62191d5c1a57aea08ff800bd31de2aaf8fb674f38e14b12973ad01f814a34c9701ceb99c6fe4852fbeced0e461cccebd519160
SSDEEP

6144:wmzlXGWsNr07Of1QJLDEAXLgM+EvBlb6IKk5IeqoEM:fXGJNr0Cf1Qh4QgMbnbukvqBM

Score

1^/10

Malware Config

Signatures

Files

stub.exe
.exe windows x86

68bc945fe08cb939967f62aab6adcbdc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetProcAddress
GetCurrentProcess
HeapFree
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetLastError
GetCurrentThread
HeapAlloc
GetProcessHeap
HeapReAlloc
LoadLibraryA
GetModuleHandleA
TlsGetValue
TlsSetValue
GetStdHandle
GetConsoleMode
WaitForSingleObject
MultiByteToWideChar
WriteConsoleW
CloseHandle
InitOnceBeginInitialize
TlsAlloc
InitOnceComplete
TlsFree
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetLastError
LoadLibraryExW
FreeLibrary
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
RtlUnwind
TerminateProcess
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

ntdll

RtlNtStatusToDosError
NtWriteFile

api-ms-win-crt-string-l1-1-0

strlen
wcsncmp

api-ms-win-crt-runtime-l1-1-0

abort
_seh_filter_exe
_set_app_type
_controlfp_s
_configure_narrow_argv
_initialize_narrow_environment
_crt_atexit
_get_initial_narrow_environment
terminate
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_initterm
_exit
exit
_initterm_e

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
calloc

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68bc945fe08cb939967f62aab6adcbdc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 131KB - Virtual size: 130KB

.data Size: 123KB - Virtual size: 123KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 131KB - Virtual size: 130KB

.data
Size: 123KB - Virtual size: 123KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB