bddceee4986855b09fe3bb2ddecfab180a8cbddd3ee2358572908ee536d803a4

Sharing

Copy URL Twitter E-mail

General

Target

bddceee4986855b09fe3bb2ddecfab180a8cbddd3ee2358572908ee536d803a4
Size

17KB
MD5

4bb273841c21ad4b77dcdd523696e9f2
SHA1

707ea826d0d67ad4fcb974af4445fc9b828f431b
SHA256

bddceee4986855b09fe3bb2ddecfab180a8cbddd3ee2358572908ee536d803a4
SHA512

af11d5056bd4e27aa837cf51e2074fb74098b416216af2c7de5d9b67a80f5fd9479ae8e4771b450fb677197c28f796e004089d2e790e1dce056aa5c4fc4fb166
SSDEEP

192:DJzwDfPO8GwykeR73bytQTBzltS373l5G+UaBCavZCsAYHSI5Jnd8ss8:DJzw5dykeF20B23bGrICaYsPZPH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bddceee4986855b09fe3bb2ddecfab180a8cbddd3ee2358572908ee536d803a4

Files

bddceee4986855b09fe3bb2ddecfab180a8cbddd3ee2358572908ee536d803a4
.dll windows:6 windows x64 arch:x64

1dc1d6487cca281d96410268e8f98c53

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

E:\oss.perl_5.281.1-branch_64\oss.perl\5.281.1-branch\pkg\PERL\src\perl-5.28.1\lib\auto\Fcntl\Fcntl.pdb

Imports

perl528

Perl_newSViv
Perl_croak_sv
Perl_stack_grow
Perl_newSV_type
Perl_sv_setpvn
Perl_croak_nocontext
Perl_mro_method_changed_in
Perl_hv_common
Perl_croak_xs_usage
Perl_sv_setuv_mg
Perl_hv_common_key_len
Perl_newXS
Perl_get_hv
Perl_newSVpvf_nocontext
Perl_newSVuv
Perl_newXS_deffile
Perl_newCONSTSUB
Perl_sv_free2
Perl_xs_boot_epilog
Perl_xs_handshake
Perl_sv_upgrade
Perl_sv_2uv_flags
Perl_sv_2mortal
Perl_sv_newmortal
Perl_newSVpvn_flags

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
memset

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_cexit
_execute_onexit_table
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv

kernel32

RtlVirtualUnwind
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlLookupFunctionEntry
RtlCaptureContext

Exports

Exports

boot_Fcntl

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1dc1d6487cca281d96410268e8f98c53

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

perl528

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 5KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 492B

.reloc Size: 512B - Virtual size: 320B

.text
Size: 6KB - Virtual size: 5KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 492B

.reloc
Size: 512B - Virtual size: 320B