objconv-x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

objconv-x64.exe
Size

671KB
MD5

b5fb8b011a3942de4072a3ddb0041201
SHA1

a9104e377a8060c4323832c764c7cf78351631be
SHA256

d959a169abb70ad25ac8679ef7371d0a2fa388325d2d334eec3be1bf57b6d784
SHA512

c6297fe79512f8d9b2be8e303786ce45830f66315cc65aed82c9cad55f95935397daed42b404e7db74766bb24bbf4ae016f1ba8fca8857a641566d9d988660a7
SSDEEP

12288:Zwz9K4sCdrZwATd4TGqQcXs1R1MDaJgnexll+lllh555EG:ZwpKodt1TCxQE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
objconv-x64.exe

Files

objconv-x64.exe
.exe windows x64

d920ea9333f3bfabe8afa5faf26e0cfd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
ReadFile
GetConsoleMode
ReadConsoleW
WriteFile
GetConsoleCP
CreateFileW
GetFileType
GetModuleFileNameW
GetStdHandle
GetCommandLineA
GetCommandLineW
HeapAlloc
HeapFree
CompareStringW
LCMapStringW
SetStdHandle
SetFilePointerEx
MultiByteToWideChar
WideCharToMultiByte
SetEndOfFile
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
GetStringTypeW
FlushFileBuffers
GetFileSizeEx
WriteConsoleW
GetTimeZoneInformation
HeapSize
HeapReAlloc

Sections

.text
Size: 357KB - Virtual size: 357KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 191KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d920ea9333f3bfabe8afa5faf26e0cfd

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 357KB - Virtual size: 357KB

.rdata Size: 112KB - Virtual size: 111KB

.data Size: 184KB - Virtual size: 191KB

.pdata Size: 15KB - Virtual size: 15KB

_RDATA Size: 512B - Virtual size: 148B

.rsrc Size: 512B - Virtual size: 480B

.text
Size: 357KB - Virtual size: 357KB

.rdata
Size: 112KB - Virtual size: 111KB

.data
Size: 184KB - Virtual size: 191KB

.pdata
Size: 15KB - Virtual size: 15KB

_RDATA
Size: 512B - Virtual size: 148B

.rsrc
Size: 512B - Virtual size: 480B