C:\Documents and Settings\user\Desktop\msvc compile\PS3Dec\Release\PS3Dec.pdb
Static task
static1
1 signatures
General
-
Target
PS3Dec.exe
-
Size
85KB
-
MD5
2c28f580db4ca6163cf828d04704c286
-
SHA1
cc8d52d3fc3b93bfb101c816d72d2582f5980cad
-
SHA256
db040a51ab6a82f54d23a17552d81695f5c8aceb460c5757d89291619994df18
-
SHA512
631979d91408603eb71b38d411215833c08a9e158cf04686a2e60e8378fe8c0860718da74d5d6b2f938f55e321fd4730b745d61e59b2d5012786f9948a3e8633
-
SSDEEP
1536:iuE6S+XzNhEEfgaBZqdfcAaxMXoAQ/ynbBRJHnxjwneDNPw5UWyA0:HEj+XzNhEEI4qdUydRJHxj10ULA
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PS3Dec.exe
Files
-
PS3Dec.exe.exe windows:5 windows x86 arch:x86
ec6ebc1bec8c55c8fc9523a6667f4243
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetConsoleTitleA
GetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
Sleep
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
RtlUnwind
MultiByteToWideChar
ReadFile
SetStdHandle
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
WriteConsoleW
CloseHandle
CreateFileA
IsProcessorFeaturePresent
HeapSize
LCMapStringW
GetStringTypeW
CreateFileW
SetEndOfFile
GetProcessHeap
vcomp100
omp_get_thread_num
_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_set_num_threads
_vcomp_fork
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ