c:\builds\moz2_slave\tb-try-c-cen-w32-0000000000000\build\objdir-tb\mfbt\tests\TestTuple.pdb
Static task
static1
Behavioral task
behavioral1
Sample
18c943fe2a53afa2157b58981f297ca47281530aec9b268faedde6e45390e37d.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
18c943fe2a53afa2157b58981f297ca47281530aec9b268faedde6e45390e37d.exe
Resource
win10v2004-20240611-en
General
-
Target
18c943fe2a53afa2157b58981f297ca47281530aec9b268faedde6e45390e37d.exe
-
Size
56KB
-
MD5
35038348f3dc9176fa0e89e43890c740
-
SHA1
178ce8d2eb2735a7644f7fb8226a0838d6d218da
-
SHA256
18c943fe2a53afa2157b58981f297ca47281530aec9b268faedde6e45390e37d
-
SHA512
d0d5dc73dfb122ae099d4af08825a911d4f24440340a1f55136f589277e8f2db326c082b28867cc8c50aaee8d1565a1625e7f01f6546bddadda6e7c28882b1fa
-
SSDEEP
1536:4bIIujlu2+UrsNqnkSqrbaig9RM6vC2iiHE7YJt/eB/C/A2JJVD:IIIu+Uiqn2p1qt/eB52JJVD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18c943fe2a53afa2157b58981f297ca47281530aec9b268faedde6e45390e37d.exe
Files
-
18c943fe2a53afa2157b58981f297ca47281530aec9b268faedde6e45390e37d.exe.exe windows:5 windows x86 arch:x86
ad35ddad9e78e9f6b53e62e1f803d9a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
TerminateProcess
GetCurrentProcess
GetSystemInfo
VirtualAlloc
VirtualFree
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
GetSystemTimeAsFileTime
msvcp120
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?setprecision@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
_Inf
_Nan
?_BADOFF@std@@3_JB
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Xbad_alloc@std@@YAXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
msvcr120
memset
_purecall
memmove
ceil
_unlock
_calloc_crt
__dllonexit
_onexit
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_XcptFilter
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
__initenv
_fmode
_commode
_except_handler4_common
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
fprintf
fflush
__iob_func
??3@YAXPAX@Z
??2@YAPAXI@Z
_lock
memcpy
Exports
Exports
??0Decimal@WebCore@@QAE@ABV01@@Z
??0Decimal@WebCore@@QAE@ABVEncodedData@01@@Z
??0Decimal@WebCore@@QAE@H@Z
??0Decimal@WebCore@@QAE@W4Sign@01@H_K@Z
??0SHA1Sum@mozilla@@QAE@XZ
??4Decimal@WebCore@@QAEAAV01@ABV01@@Z
??8Decimal@WebCore@@QBE_NABV01@@Z
??9Decimal@WebCore@@QBE_NABV01@@Z
??DDecimal@WebCore@@QBE?AV01@ABV01@@Z
??GDecimal@WebCore@@QBE?AV01@ABV01@@Z
??GDecimal@WebCore@@QBE?AV01@XZ
??HDecimal@WebCore@@QBE?AV01@ABV01@@Z
??KDecimal@WebCore@@QBE?AV01@ABV01@@Z
??MDecimal@WebCore@@QBE_NABV01@@Z
??NDecimal@WebCore@@QBE_NABV01@@Z
??ODecimal@WebCore@@QBE_NABV01@@Z
??PDecimal@WebCore@@QBE_NABV01@@Z
??XDecimal@WebCore@@QAEAAV01@ABV01@@Z
??YDecimal@WebCore@@QAEAAV01@ABV01@@Z
??ZDecimal@WebCore@@QAEAAV01@ABV01@@Z
??_0Decimal@WebCore@@QAEAAV01@ABV01@@Z
??_FDecimal@WebCore@@QAEXXZ
?CreateDecimalRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHHPAVStringBuilder@2@@Z
?CreateExponentialRepresentation@DoubleToStringConverter@double_conversion@@ABEXPBDHHPAVStringBuilder@2@@Z
?DoubleToAscii@DoubleToStringConverter@double_conversion@@SAXNW4DtoaMode@12@HPADHPA_NPAH3@Z
?EcmaScriptConverter@DoubleToStringConverter@double_conversion@@SAABV12@XZ
?HandleSpecialValues@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@@Z
?HashBytes@mozilla@@YAIPBXI@Z
?IsFloat32Representable@mozilla@@YA_NN@Z
?ToExponential@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z
?ToFixed@DoubleToStringConverter@double_conversion@@QBE_NNHPAVStringBuilder@2@@Z
?ToPrecision@DoubleToStringConverter@double_conversion@@QBE_NNHPA_NPAVStringBuilder@2@@Z
?ToShortestIeeeNumber@DoubleToStringConverter@double_conversion@@ABE_NNPAVStringBuilder@2@W4DtoaMode@12@@Z
?abs@Decimal@WebCore@@QBE?AV12@XZ
?alignOperands@Decimal@WebCore@@CA?AUAlignedOperands@12@ABV12@0@Z
?ceiling@Decimal@WebCore@@QBE?AV12@XZ
?compareTo@Decimal@WebCore@@ABE?AV12@ABV12@@Z
?compress@LZ4@Compression@mozilla@@SAIPBDIPAD@Z
?compressLimitedOutput@LZ4@Compression@mozilla@@SAIPBDIPADI@Z
?decompress@LZ4@Compression@mozilla@@SA_NPBDIPADIPAI@Z
?decompress@LZ4@Compression@mozilla@@SA_NPBDPADI@Z
?finish@SHA1Sum@mozilla@@QAEXAAY0BE@E@Z
?floor@Decimal@WebCore@@QBE?AV12@XZ
?fromDouble@Decimal@WebCore@@SA?AV12@N@Z
?fromString@Decimal@WebCore@@SA?AV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?gChaosModeCounter@detail@mozilla@@3V?$Atomic@I$01X@2@A
?gTwoCharEscapes@detail@mozilla@@3QBDB
?infinity@Decimal@WebCore@@SA?AV12@W4Sign@12@@Z
?kBase10MaximalLength@DoubleToStringConverter@double_conversion@@2HB
?nan@Decimal@WebCore@@SA?AV12@XZ
?remainder@Decimal@WebCore@@QBE?AV12@ABV12@@Z
?round@Decimal@WebCore@@QBE?AV12@XZ
?toDouble@Decimal@WebCore@@QBENXZ
?toString@Decimal@WebCore@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?toString@Decimal@WebCore@@QBE_NPADI@Z
?unused@mozilla@@3Uunused_t@1@B
?update@SHA1Sum@mozilla@@QAEXPBXI@Z
?zero@Decimal@WebCore@@SA?AV12@W4Sign@12@@Z
gMozillaPoisonBase
gMozillaPoisonSize
gMozillaPoisonValue
mozPoisonValueInit
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ