b855468e41d3862cc888e7d42b52e703

Sharing

Copy URL Twitter E-mail

General

Target

b855468e41d3862cc888e7d42b52e703
Size

521KB
MD5

b855468e41d3862cc888e7d42b52e703
SHA1

ccdb3bf494bd2ecd573ca59341cbdebaa5aa620c
SHA256

e8af0a50b710976382e61694007035062cefc3402348c984d159d0b2621c07be
SHA512

b80b8043bb1e55fbe665b7c36c25a513c970a5cc884d80ffdaaa0a462dd67ac7e9b950ab32645788378d41151467317416bfdc0f365594432d80281f571e07fd
SSDEEP

12288:E2Y/HtWb0su/AEQE3kWYgeWYg955/155/lVooaC9:rYwb0su/TQE3Rbao

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b855468e41d3862cc888e7d42b52e703

Files

b855468e41d3862cc888e7d42b52e703
.dll windows:6 windows x64 arch:x64

de7dae3861a8ef255af487bb8066a845

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\malid\source\repos\HiveWorkstation\client\x64\Release\app.pdb

Imports

kernel32

CreateThread
CloseHandle
LoadLibraryA
GetProcAddress
Sleep
SetEndOfFile
WriteConsoleW
CreateFileW
SetStdHandle
HeapSize
GetProcessHeap
GetModuleFileNameA
ExpandEnvironmentStringsA
InitializeCriticalSectionEx
CreateMutexA
WaitForSingleObject
GetLastError
RaiseException
DecodePointer
DeleteCriticalSection
WideCharToMultiByte
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
OpenEventA
SetEvent
CreateEventA
GetCurrentThreadId
WaitForSingleObjectEx
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LocalFree
MultiByteToWideChar
LCMapStringEx
QueryPerformanceCounter
QueryPerformanceFrequency
CompareStringEx
GetCPInfo
GetSystemTimeAsFileTime
GetModuleHandleW
GetStringTypeW
InitializeCriticalSectionAndSpinCount
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetFileSizeEx
SetFilePointerEx
GetStdHandle
GetFileType
FlushFileBuffers
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapFree
HeapAlloc
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW

user32

SetClipboardData
RemoveClipboardFormatListener
GetClipboardData
TranslateMessage
CreateWindowExA
EmptyClipboard
CloseClipboard
SetTimer
DispatchMessageW
OpenClipboard
AddClipboardFormatListener
DefWindowProcW
GetMessageW
CharLowerA
DestroyWindow
RegisterClassExA
CallNextHookEx
KillTimer
UnregisterClassA

ole32

StringFromGUID2
CoInitializeSecurity
CoCreateGuid
CoInitializeEx
CoCreateInstance

oleaut32

SysAllocString
VariantClear
VariantInit
SysFreeString

Exports

Exports

LicenseManager
QueryLicenses

Sections

.text
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de7dae3861a8ef255af487bb8066a845

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 360KB - Virtual size: 360KB

.rdata Size: 126KB - Virtual size: 125KB

.data Size: 11KB - Virtual size: 25KB

.pdata Size: 17KB - Virtual size: 17KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 360KB - Virtual size: 360KB

.rdata
Size: 126KB - Virtual size: 125KB

.data
Size: 11KB - Virtual size: 25KB

.pdata
Size: 17KB - Virtual size: 17KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 4KB - Virtual size: 3KB