ab718fcb57351ec5b2f46f0c2c2eef32

Sharing

Copy URL Twitter E-mail

General

Target

ab718fcb57351ec5b2f46f0c2c2eef32
Size

790KB
MD5

ab718fcb57351ec5b2f46f0c2c2eef32
SHA1

d4ef970abfe7690f017e4afb90912697b944f28c
SHA256

7a2981129e321874b4b884e6b076ad4572c4dda7d79e38dc72631d2cb59b5ddf
SHA512

275b6d1e1dbf1b7bc8c6c94cb5a5fe24c45fd5c11ef3a86abb05bfdcbffcecd719ddb6194b2e61dd6aa632bcb065da9dd04be6ac6287bac2e068c0c99e16ac91
SSDEEP

12288:Q/QZSkluwskSefOHr8lh0eY2wo3T6+BgfzZtoj0+hf:QoZ5gwBSefOHIl/g+uUj0Of

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab718fcb57351ec5b2f46f0c2c2eef32

Files

ab718fcb57351ec5b2f46f0c2c2eef32
.exe windows:6 windows x64 arch:x64

a78caf657658259c168a9abe45303343

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Desktop\Installateurs\rust\rust_binder\target\release\deps\stub-d64cbb2c67123848.pdb

Imports

advapi32

SystemFunction036
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA

kernel32

GetProcessHeap
HeapFree
HeapAlloc
CloseHandle
SetLastError
GetTempPathW
GetLastError
WaitForSingleObject
GetExitCodeProcess
DosDateTimeToFileTime
FileTimeToSystemTime
AddVectoredExceptionHandler
DeleteCriticalSection
GetModuleHandleW
GetProcAddress
TlsAlloc
TlsGetValue
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
GetEnvironmentVariableW
LoadLibraryW
FreeLibrary
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
GetStdHandle
GetConsoleMode
WriteFile
WriteConsoleW
GetCurrentDirectoryW
FormatMessageW
InitializeCriticalSection
GetModuleFileNameW
GetFileInformationByHandle
DeviceIoControl
ReadFile
SetFilePointerEx
CreateFileW
FindNextFileW
CreateDirectoryW
CreateProcessW
GetCurrentProcessId
CreateNamedPipeW
DuplicateHandle
SetHandleInformation
HeapReAlloc
RemoveDirectoryW
FindFirstFileW
DeleteFileW
FindClose
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry

vcruntime140

__C_specific_handler
memcmp
memset
memmove
memcpy

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
malloc
realloc

api-ms-win-crt-time-l1-1-0

_utime64
_time64
_mktime64
_localtime64_s

api-ms-win-crt-runtime-l1-1-0

_get_initial_narrow_environment
_initterm
_initterm_e
_initialize_narrow_environment
_exit
_wassert
__p___argc
__p___argv
exit
_c_exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_set_app_type
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_seh_filter_exe
_cexit

api-ms-win-crt-stdio-l1-1-0

fwrite
__p__commode
_ftelli64
_set_fmode
_fseeki64
fread
fflush
fclose
freopen_s
fopen_s

api-ms-win-crt-filesystem-l1-1-0

remove
_stat64i32

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 313B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 868B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a78caf657658259c168a9abe45303343

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 294KB - Virtual size: 293KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 7KB - Virtual size: 8KB

.pdata Size: 6KB - Virtual size: 5KB

.tls Size: 512B - Virtual size: 313B

.gfids Size: 512B - Virtual size: 28B

.rsrc Size: 107KB - Virtual size: 107KB

.reloc Size: 1024B - Virtual size: 868B

.text
Size: 294KB - Virtual size: 293KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 7KB - Virtual size: 8KB

.pdata
Size: 6KB - Virtual size: 5KB

.tls
Size: 512B - Virtual size: 313B

.gfids
Size: 512B - Virtual size: 28B

.rsrc
Size: 107KB - Virtual size: 107KB

.reloc
Size: 1024B - Virtual size: 868B