C:\dvs\p4\build\sw\devrel\Playpen\yyao\VRBench\VR-FCAT\FVSDK_rel_1_0\external\FvSDK\FvSDKTestClient\FvSDKTestClient\bin\FvSDKTestClient.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7c26724ad3f225af95cd8379f9b7b6c5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7c26724ad3f225af95cd8379f9b7b6c5.exe
Resource
win10v2004-20240226-en
General
-
Target
7c26724ad3f225af95cd8379f9b7b6c5.bin
-
Size
1.5MB
-
MD5
7c26724ad3f225af95cd8379f9b7b6c5
-
SHA1
1300d504936171a48665702fe0482015a53a7062
-
SHA256
f5dc9b519c5f5d7878199a2c090a58dfca4b33a8c2e7f652bb89e9c27ca09e4e
-
SHA512
5e8136ddaee6506e6b140827637a9a6fb1c9357b04e82c87203bfdc76634120ebbcabb84721cad954e57d0b4d40bc11477d6009dae902c698e37c2c1917d0ee6
-
SSDEEP
12288:L+q+FdCGAfUo0aQyZLDAptNyvUgXZ32dT4ePc7N29Cxs5+j2QNbxf53nHVoTOyEx:yBdCGAMNaQzNyBo4kx929bL3Hnx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c26724ad3f225af95cd8379f9b7b6c5.bin
Files
-
7c26724ad3f225af95cd8379f9b7b6c5.bin.exe windows:6 windows x64 arch:x64
2cf97f9719da37b00c9d5013c4bb6479
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
SetConsoleCtrlHandler
SetDefaultDllDirectories
WaitForSingleObject
Sleep
QueryPerformanceFrequency
CloseHandle
CreateThread
GetLocalTime
QueryPerformanceCounter
GetSystemDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryA
VerSetConditionMask
CreateFileW
GetFileAttributesW
GetFullPathNameW
OutputDebugStringW
GetLastError
SetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
LocalAlloc
LocalFree
lstrcmpA
VerifyVersionInfoW
FileTimeToSystemTime
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
WriteFile
GetCommandLineA
GetCommandLineW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
GetFileSizeEx
SetFilePointerEx
GetProcessHeap
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
ReadConsoleW
HeapSize
SetEndOfFile
Sections
.text Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 97KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE