C:\Jenkins\workspace\license-console\x64\Release\DSCopyHWId.pdb
Static task
static1
1 signatures
General
-
Target
dscopyhwid.exe
-
Size
286KB
-
MD5
0e8205a129dc38708f7b9ee8a69c845f
-
SHA1
e3f0b61e4c2fdd986c73a5c25c781bbd3035a227
-
SHA256
047105f13c92d8b11192dd6a3fa42098e24f48b23b2b60d05d3fc5631f67a961
-
SHA512
815b37d1936bf2b5e6ea9bf920602ace6edfba14e5e4a2d433a088b0081e17df2c6a5e3cc9b7b3636b0032b475e09cc1ddc27100e382bda58f43ab63eff9bd3a
-
SSDEEP
6144:o33hAleu+Rx/OJKtn9u89HLZkqGuAkmsoiXdlHfA340X0gNih8F+apwxMkLL9ohf:N5ILL9o5oaqBk
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dscopyhwid.exe
Files
-
dscopyhwid.exe.exe windows:6 windows x64 arch:x64
9d89f1c8373dfde34b88d2120aaa261f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
WriteConsoleW
CreateFileW
HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
DeviceIoControl
GetVersionExW
GetComputerNameExW
GetLastError
CreateFileA
GetSystemDirectoryA
CloseHandle
LoadLibraryW
GetProcAddress
LocalFree
VerSetConditionMask
FreeLibrary
VerifyVersionInfoW
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
GetStringTypeW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
CreateEventW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetStdHandle
WriteFile
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
GetCommandLineA
GetCommandLineW
HeapFree
HeapAlloc
GetFileType
CompareStringW
LCMapStringW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
user32
MessageBoxA
EmptyClipboard
OpenClipboard
CloseClipboard
SetClipboardData
advapi32
LookupAccountNameW
ole32
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
SysAllocString
VariantInit
SysFreeString
VariantClear
Sections
.text Size: 149KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 244B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ