0dc66ed8cac288b887965fa0190b86a86dfced8c9cf4a2ee829d701d80d01721

Sharing

Copy URL Twitter E-mail

General

Target

0dc66ed8cac288b887965fa0190b86a86dfced8c9cf4a2ee829d701d80d01721
Size

20KB
MD5

80dd19989e475da5c1390c18865d98f0
SHA1

6dd54cad47af87ed8f40a233c614c7a84d2bd8b6
SHA256

0dc66ed8cac288b887965fa0190b86a86dfced8c9cf4a2ee829d701d80d01721
SHA512

f25f95ddda9f40662e7d1e3991006dc2916aab62b99c454aebf60b3192f81429ae6cf8e6b2fb03dc62968c6c8ae554ed47f136ef560935f4c8f6082d0ac36845
SSDEEP

384:Ywy+pPI8J3PJ7EtwmyvquSkTjC/TqeNXmkd+Fb/K:YwVKGJ7Et+SkqFXmkYby

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0dc66ed8cac288b887965fa0190b86a86dfced8c9cf4a2ee829d701d80d01721

Files

0dc66ed8cac288b887965fa0190b86a86dfced8c9cf4a2ee829d701d80d01721
.exe windows:5 windows x86 arch:x86

5ec72c2a7ff1d21b4ba1986ef5625902

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\builds\moz2_slave\tb-c-beta-w32-0000000000000000\build\objdir-tb\xpcom\tests\TestThreadUtils.pdb

Imports

nss3

PR_GetEnv
PR_SetCurrentThreadName
PR_IntervalNow

xul

NS_CStringContainerInit
NS_CStringGetData
NS_CStringCopy
NS_GetServiceManager
NS_CStringToUTF16
NS_CStringContainerFinish
NS_CStringContainerInit2
NS_StringContainerFinish
NS_StringContainerInit2
NS_StringContainerInit
NS_NewLocalFile
NS_ShutdownXPCOM
NS_InitXPCOM2

mozglue

free
moz_xmalloc

kernel32

GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent

vcruntime140

memcpy
memset
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
_except_handler4_common

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
__acrt_iob_func
putchar
__stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_set_app_type
_initialize_narrow_environment
exit
_get_initial_narrow_environment
_exit
terminate
_controlfp_s
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_seh_filter_exe
__p___argc
_initterm
__p___argv
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_initterm_e

api-ms-win-crt-math-l1-1-0

__setusermatherr
_except1

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ec72c2a7ff1d21b4ba1986ef5625902

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

nss3

xul

mozglue

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 948B

.gfids Size: 512B - Virtual size: 32B

.reloc Size: 1024B - Virtual size: 840B

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 948B

.gfids
Size: 512B - Virtual size: 32B

.reloc
Size: 1024B - Virtual size: 840B