b6b1ae37f2d8dd4b847ca167a5ca06bf73634947aec52331da446d309eca9a0d

Sharing

Copy URL

Twitter E-mail

General

Target

b6b1ae37f2d8dd4b847ca167a5ca06bf73634947aec52331da446d309eca9a0d
Size

2.1MB
MD5

e4a472a8f156a24fe32311fc3afe7359
SHA1

246be74cdd348027cf6fc8c7b7b6f5219d4880f4
SHA256

b6b1ae37f2d8dd4b847ca167a5ca06bf73634947aec52331da446d309eca9a0d
SHA512

31ad0e9baac5f421c50bd6dca796ece7b34e3b2f4e60f099d326eeea4dc5080edbbae604caea052e1c96671f535bcfb382b015392ea714af8a952822c24ec3b3
SSDEEP

12288:97ba7chh//f5PJeWZnTCrMc7pTysIOEK7hVgPuNFULdZz:BTTm9VE4eGNFU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b6b1ae37f2d8dd4b847ca167a5ca06bf73634947aec52331da446d309eca9a0d

Files

b6b1ae37f2d8dd4b847ca167a5ca06bf73634947aec52331da446d309eca9a0d
.exe windows:6 windows x86 arch:x86

f373d8c168c169219e827c90eefbe194

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\source\repos\UUID控制台\Release\UUID控制台.pdb

Imports

kernel32

GetLastError
LoadLibraryA
CloseHandle
GetProcAddress
DeleteCriticalSection
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
InitializeCriticalSectionEx
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
CreateEventW
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
IsDebuggerPresent
InitializeSListHead

advapi32

RegOpenKeyExA
RegQueryInfoKeyA

vcruntime140

_except_handler4_common
memset
__CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

__p___argc
_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_initialize_onexit_table
_get_initial_narrow_environment
__p___argv
_controlfp_s
_configure_narrow_argv
_c_exit
_set_app_type
_initialize_narrow_environment
_cexit
exit
_crt_atexit
_register_onexit_function
terminate
_seh_filter_exe

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__p__commode
_set_fmode
__acrt_iob_func

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 918KB - Virtual size: 917KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f373d8c168c169219e827c90eefbe194

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 918KB - Virtual size: 917KB

.reloc Size: 93KB - Virtual size: 92KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 918KB - Virtual size: 917KB

.reloc
Size: 93KB - Virtual size: 92KB