C:\Users\Spuck\Downloads\Metamorph-main\Metamorph-main\x64\Release\Metamorph-Checker.pdb
Static task
static1
1 signatures
General
-
Target
Metamorph-Checker.exe
-
Size
294KB
-
MD5
b7873d82f560cc75337165f7f4a8dcc7
-
SHA1
9ba11c6444a028439139cfd3f48bc61456a7f017
-
SHA256
61d3c30364765e5f783ef9fdb9609eeaf1fb569cc3e5f7c9cbf1a3627bc45089
-
SHA512
a3726d36f84a601469d5c0955674dd258b8a7b7faf761cc5496bc48424a2d2f213286b7620947429cbd2c2b54c7f1047c82ee81d06876ffbefe0f36aa852cc11
-
SSDEEP
6144:Q24qY5JTrfbXimJSzlrXAsidypiiiwTiiio4m2WaFmfYja5IWis:hY5J3Dimm7idypiiiwTiiio4DmQYI
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Metamorph-Checker.exe
Files
-
Metamorph-Checker.exe.exe windows:6 windows x64 arch:x64
26e7db2b4183c72fb98e1bb6eb91752f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
WideCharToMultiByte
FindNextFileW
FindFirstFileExW
GetComputerNameA
GetProcessHeap
LocalFree
HeapAlloc
CloseHandle
GetLastError
GetCurrentProcess
GetSystemFirmwareTable
FindClose
GetLocaleInfoEx
FormatMessageA
GetStdHandle
AreFileApisANSI
GetModuleHandleW
MultiByteToWideChar
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
SetConsoleTextAttribute
user32
SystemParametersInfoA
advapi32
RegQueryValueExA
RegOpenKeyExA
OpenProcessToken
RegCloseKey
ConvertSidToStringSidA
GetTokenInformation
GetUserNameA
ole32
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
VariantClear
SysFreeString
SysAllocString
msvcp140
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Xbad_function_call@std@@YAXXZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?good@ios_base@std@@QEBA_NXZ
iphlpapi
GetIpNetTable
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_copy
memcmp
memcpy
memset
__current_exception_context
__current_exception
_CxxThrowException
__C_specific_handler
__std_exception_destroy
memmove
__std_terminate
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vfprintf
__acrt_iob_func
__p__commode
api-ms-win-crt-time-l1-1-0
_localtime64_s
strftime
_time64
api-ms-win-crt-runtime-l1-1-0
system
terminate
_seh_filter_exe
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_set_app_type
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_configure_narrow_argv
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-heap-l1-1-0
_callnewh
free
malloc
_set_new_mode
api-ms-win-crt-math-l1-1-0
__setusermatherr
_dclass
_dsign
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
localeconv
___lc_codepage_func
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 178KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ