a768b1aa01cb251e6280b537b1aecf75940eec73e076e546e9248a639864ec8f

Sharing

Copy URL Twitter E-mail

General

Target

a768b1aa01cb251e6280b537b1aecf75940eec73e076e546e9248a639864ec8f
Size

459KB
MD5

fdd7fa67b943863e596b87d0d573894b
SHA1

ac76cb100d5da8fecf249ffb16652a1c474d94d5
SHA256

a768b1aa01cb251e6280b537b1aecf75940eec73e076e546e9248a639864ec8f
SHA512

de0263ffc9f474ee030d42f67ff8e7ca4e4dcd1226109940da39b63b928d2dca86fee47e4e48d0696044c9c2e358452aa7a2c5fcfbc15b5bc10a1645d926fb4c
SSDEEP

6144:FCuBY3IQWL6Ioz131a1313mGmI11111111111111181lc1la1lMH1lV1lc1lV1lC:kuuWDoXVdE/ZYcj3X2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a768b1aa01cb251e6280b537b1aecf75940eec73e076e546e9248a639864ec8f

Files

a768b1aa01cb251e6280b537b1aecf75940eec73e076e546e9248a639864ec8f
.exe windows:6 windows x86 arch:x86

b1e694216e0685949e613508239716aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\AXITest\bin\Debug\FRUEditor.pdb

Imports

ucrtbased

strlen
_CrtDbgReport
_invalid_parameter
_difftime64
_mktime64
_time64
strcmp
strcpy_s
div
_wassert
strcat_s
_mbsicmp
_wcsicmp
wcslen
_stricmp
fseek
ftell
fread
fopen_s
fclose
abort
_callnewh
malloc
memset
terminate
_CrtDbgReportW
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_free_dbg
__stdio_common_vsprintf_s

vcruntime140d

__CxxFrameHandler3
__CxxQueryExceptionSize
__CxxRegisterExceptionObject
__CxxDetectRethrow
memcmp
__CxxUnregisterExceptionObject
__FrameUnwindFilter
_except_handler4_common
memmove
memcpy
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxExceptionFilter

kernel32

CreateEventW
GetModuleHandleW
GetProcAddress
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle
GetCurrentThreadId
GetSystemTimeAsFileTime
WaitForSingleObjectEx
GetFileAttributesA
Sleep
QueryPerformanceCounter

axigo

TevDiag_ChassisNumberFromIndex
TevDiag_NumberOfChassis
TevDiag_ChassisType
TevTool_CreateGUITag
TevDiag_NumberOfSlotsInChassis
TevDiag_CreatePhysicalMVPBoardString
TevDiag_IsFRUDevicePresent
TevDiag_CreatePhysicalMVPChassisControllerString
TevTool_ReadFRUInfo
TevError_GetLastError
TevExec_SwRestartIPMIOnly
TevExec_SwRestart
TevExec_GetConfigDataPath
TevTool_WriteFRUInfo
TevTool_GetBoardPCIeBusNumber
TevTester_IsIPMIActive
TevDiag_ChassisIPNumber
TevDiag_H8SRevLevel
TevTool_DecodeGUITag

inventoryservices

?GetPartNumber@TevFRU@@QBEPBDXZ
?GetBoardRevision@TevFRU@@QBEPBDXZ
?GetManufacturer@TevFRU@@QBEPBDXZ
??4TevFRU@@QAEAAV0@QAY0CA@$$CBD@Z
?GetBoardName@TevFRU@@QBEPBDXZ
??1TevFRU@@QAE@XZ
??0TevFRU@@QAE@XZ
?GetSerialNumber@TevFRU@@QBEPBDXZ

plxapi720

PlxPci_EepromWriteByOffset_16
PlxPci_DeviceClose
PlxPci_GetPortProperties
PlxPci_EepromPresent
PlxPci_DeviceOpen
PlxPci_DeviceFind
PlxPci_EepromSetAddressWidth

msvcp140d

??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Xlength_error@std@@YAXPBD@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?__ExceptionPtrDestroy@@YAXPAX@Z

mscoree

_CorExeMain

Sections

.text
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b1e694216e0685949e613508239716aa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ucrtbased

vcruntime140d

kernel32

axigo

inventoryservices

plxapi720

msvcp140d

mscoree

Sections

.text Size: 76KB - Virtual size: 75KB

.rdata Size: 364KB - Virtual size: 364KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 76KB - Virtual size: 75KB

.rdata
Size: 364KB - Virtual size: 364KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 2KB - Virtual size: 2KB