D:\a\avrdude\avrdude\build\src\RelWithDebInfo\avrdude.pdb
Static task
static1
Behavioral task
behavioral1
Sample
avrdude-v7.3-windows-x64.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
avrdude-v7.3-windows-x64.zip
Resource
win10v2004-20240412-en
Behavioral task
behavioral3
Sample
avrdude.conf
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
avrdude.conf
Resource
win10v2004-20240412-en
Behavioral task
behavioral5
Sample
avrdude.exe
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
avrdude.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
avrdude.pdb
Resource
win7-20240319-en
Behavioral task
behavioral8
Sample
avrdude.pdb
Resource
win10v2004-20240412-en
General
-
Target
avrdude-v7.3-windows-x64.zip
-
Size
3.4MB
-
MD5
7f26d57fd9be941da82f207f13c03ade
-
SHA1
86c3b5830ee8ac7a8bde7157b01dd01611994715
-
SHA256
8b211a0cb3b26a01d4d9f3f5617b113019ac457e78c358bb86044db7f596aea9
-
SHA512
6e34e02fa21bb429999646756ab9fe2246bedd19ecd7ad98b72b4e749db2e5924b155570423e1eadfc78066d31c7651a4cd38340935913e017a33a039fa41848
-
SSDEEP
98304:Dk2cZWA0WMhcpYDQCCS6gaSV6BypID0l5GenGPi:A2CH08pY7mgaSkyCAlBui
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/avrdude.exe
Files
-
avrdude-v7.3-windows-x64.zip.zip
-
avrdude.conf
-
avrdude.exe.exe windows:6 windows x64 arch:x64
6b5821915815e30876e37650672ed821
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiGetDevicePropertyW
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
hid
HidD_GetAttributes
HidD_GetHidGuid
HidD_GetProductString
ws2_32
recv
htons
WSAGetLastError
connect
socket
send
WSAStartup
gethostbyname
closesocket
WSACleanup
select
kernel32
HeapSize
SetEnvironmentVariableW
FreeEnvironmentStringsW
SetEndOfFile
WriteConsoleW
GetProcessHeap
DeleteFileW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
GetFileAttributesExW
CreateProcessW
GetExitCodeProcess
GetModuleFileNameW
WideCharToMultiByte
SearchPathA
Sleep
QueryPerformanceFrequency
QueryPerformanceCounter
ReadFile
CancelIo
WriteFile
WaitForSingleObject
CreateFileA
CloseHandle
GetOverlappedResult
CreateEventA
GetCommModemStatus
SetupComm
GetLastError
EscapeCommFunction
LocalFree
FormatMessageA
SetCommState
GetTimeZoneInformation
GetSystemTimeAsFileTime
SetCommTimeouts
DeviceIoControl
CreateFileW
CreateEventW
MultiByteToWideChar
ResetEvent
FormatMessageW
LoadLibraryW
GetProcAddress
FreeLibrary
LoadLibraryExW
HeapReAlloc
SetStdHandle
GetCurrentDirectoryW
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
GetExitCodeThread
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
RtlUnwind
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetStringTypeW
GetCPInfo
RtlUnwindEx
RtlPcToFileHeader
RaiseException
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ExitProcess
GetModuleHandleExW
GetFullPathNameW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetCommandLineA
GetCommandLineW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
SetFilePointerEx
GetConsoleMode
ReadConsoleW
HeapAlloc
HeapFree
winmm
timeBeginPeriod
timeEndPeriod
winusb
WinUsb_WritePipe
WinUsb_Initialize
WinUsb_GetDescriptor
WinUsb_SetPipePolicy
WinUsb_ControlTransfer
WinUsb_GetAssociatedInterface
WinUsb_Free
WinUsb_ReadPipe
Exports
Exports
hid_close
hid_enumerate
hid_error
hid_exit
hid_free_enumeration
hid_get_device_info
hid_get_feature_report
hid_get_indexed_string
hid_get_input_report
hid_get_manufacturer_string
hid_get_product_string
hid_get_serial_number_string
hid_init
hid_open
hid_open_path
hid_read
hid_read_timeout
hid_send_feature_report
hid_set_nonblocking
hid_version
hid_version_str
hid_winapi_get_container_id
hid_write
Sections
.text Size: 899KB - Virtual size: 899KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
avrdude.pdb