9b568bb5ee3d77a17f1603ad59f078f08968b70c7eedebd642d2522304911ae3

Sharing

Copy URL Twitter E-mail

General

Target

9b568bb5ee3d77a17f1603ad59f078f08968b70c7eedebd642d2522304911ae3
Size

17KB
MD5

173ac385f1e997b8b44e954b1d1ea3ce
SHA1

6d28c1d4e74d023697c227a6a3a073f347c5c4fc
SHA256

9b568bb5ee3d77a17f1603ad59f078f08968b70c7eedebd642d2522304911ae3
SHA512

903a0b5b9154ed0f2dc39612a7a6cd85effd853822bc19eba8a2f97e8d470406bf2ec720af9e0cbf4140679b1394a98c968300981062a5e01a1c314af6eaeb35
SSDEEP

192:YmZLmnI7c2frQReBwtF9T84sCnL3ys0eximE3Q5XfBDSRSn+:YOUI7cSrQRVt3+ODnwmE3zRY+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b568bb5ee3d77a17f1603ad59f078f08968b70c7eedebd642d2522304911ae3

Files

9b568bb5ee3d77a17f1603ad59f078f08968b70c7eedebd642d2522304911ae3
.exe windows:6 windows x64 arch:x64

1960363c99e72f3b7b6b62c27241e695

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

component_manager

??0ComponentManager@rclcpp_components@@QEAA@V?$weak_ptr@VExecutor@rclcpp@@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@3@AEBVNodeOptions@rclcpp@@@Z

rclcpp

?create_default_strategy@memory_strategies@rclcpp@@YA?AV?$shared_ptr@VMemoryStrategy@memory_strategy@rclcpp@@@std@@XZ
??0SingleThreadedExecutor@executors@rclcpp@@QEAA@AEBUExecutorOptions@2@@Z
?start_parameter_event_publisher@NodeOptions@rclcpp@@QEAAAEAV12@_N@Z
??0InitOptions@rclcpp@@QEAA@Urcutils_allocator_s@@@Z
??1NodeOptions@rclcpp@@UEAA@XZ
??0NodeOptions@rclcpp@@QEAA@Urcutils_allocator_s@@@Z
?start_parameter_services@NodeOptions@rclcpp@@QEAAAEAV12@_N@Z
?init@rclcpp@@YAXHPEBQEBDAEBVInitOptions@1@W4SignalHandlerOptions@1@@Z
?get_global_default_context@contexts@rclcpp@@YA?AV?$shared_ptr@VDefaultContext@contexts@rclcpp@@@std@@XZ
??1InitOptions@rclcpp@@UEAA@XZ

rcutils

rcutils_get_default_allocator

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

_CxxThrowException
__std_exception_destroy
memcpy
__std_exception_copy
__C_specific_handler
__current_exception
__current_exception_context
memset
memmove

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

exit
_exit
_initterm_e
__p___argc
__p___argv
_cexit
_initterm
_register_thread_local_exe_atexit_callback
_get_initial_narrow_environment
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_set_app_type
_seh_filter_exe
_c_exit

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
_set_new_mode
free

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

RtlLookupFunctionEntry
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlCaptureContext

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1960363c99e72f3b7b6b62c27241e695

Headers

DLL Characteristics

File Characteristics

Imports

component_manager

rclcpp

rcutils

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 684B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 112B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 684B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 112B