64e1bd6f8722ca6e13add02abd7869144ecdf4fbe47cc82e3635f11cbc38049c

General

Target

64e1bd6f8722ca6e13add02abd7869144ecdf4fbe47cc82e3635f11cbc38049c
Size

20KB
MD5

bdf2ca5f7faac0d3a31adc6c6fc30ffe
SHA1

fbf603a3a7674c4fa492c9286c152e4d82bd1ec1
SHA256

64e1bd6f8722ca6e13add02abd7869144ecdf4fbe47cc82e3635f11cbc38049c
SHA512

5166fc6fe011a692ac2cc758a79e0790585b543052d4a5dc10b3e6bad3b9ec9d25f69bb05cf3b0713f2120d2d6251848e63cf34359a02e6fb6550523e13384a4
SSDEEP

384:PikYaXN9DWLo1b/17XuThChR1feFx9OryJf:dF7p17A85trs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64e1bd6f8722ca6e13add02abd7869144ecdf4fbe47cc82e3635f11cbc38049c

Files

64e1bd6f8722ca6e13add02abd7869144ecdf4fbe47cc82e3635f11cbc38049c
.exe windows:5 windows x86 arch:x86

866a95870c56034de21ea52f98189d4b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\builds\moz2_slave\m-in-w32-000000000000000000000\build\src\obj-firefox\xpcom\tests\TestHashtables.pdb

Imports

xul

NS_CStringCopy
NS_CStringGetData
NS_CStringContainerFinish
NS_CStringContainerInit2
NS_CStringContainerInit
NS_DebugBreak

kernel32

IsProcessorFeaturePresent
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
EncodePointer
IsDebuggerPresent
GetCurrentProcess
TerminateProcess

msvcr120

_fmode
__initenv
_initterm
_initterm_e
_commode
_configthreadlocale
_cexit
_exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__setusermatherr
printf
exit
memmove
memcpy
rand
__iob_func
fflush
fprintf
memcmp
memset

mozglue

?gChaosFeatures@detail@mozilla@@3W4ChaosFeature@2@A
?gChaosModeCounter@detail@mozilla@@3V?$Atomic@I$01X@2@A
moz_xrealloc
malloc
moz_xmalloc
realloc
free

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

866a95870c56034de21ea52f98189d4b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

xul

kernel32

msvcr120

mozglue

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB