c:\Manjushree\EtherCAT_kit\EtherCAT_DVD2_Contents\Examples and API\2. Application Examples\EtherCAT Master\SYCON.net based Configuration\VS8\CifX_ApDemo\Debug\CifX_ApDemo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
32c50c305bdd0d5abdaeded4320501086dc79cade1eb487e5589f4fa3e97e4ea.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
32c50c305bdd0d5abdaeded4320501086dc79cade1eb487e5589f4fa3e97e4ea.exe
Resource
win10v2004-20240611-en
General
-
Target
32c50c305bdd0d5abdaeded4320501086dc79cade1eb487e5589f4fa3e97e4ea.exe
-
Size
454KB
-
MD5
659c2abaffefa214d3ae396c15ca3510
-
SHA1
9b860c360f83aabc60df30fceea10cbf0b9ead29
-
SHA256
32c50c305bdd0d5abdaeded4320501086dc79cade1eb487e5589f4fa3e97e4ea
-
SHA512
4cd26f86c9ec6bdca7edc07271d8cda3da439a3604d1a4c88d0d391058a8c1eaf7c4eda3af60fa07c3a8e0dee3f2ddac05eb2ed91126afa447dcd5cfb52c5e91
-
SSDEEP
6144:6IbxusxI6ndFjnwiVu+xETCt6pyyyCw8oQ2VIc7MawHjwoMbs9E8:6AxV7jwiQ1Ty6pyEw8HYIcUHEo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32c50c305bdd0d5abdaeded4320501086dc79cade1eb487e5589f4fa3e97e4ea.exe
Files
-
32c50c305bdd0d5abdaeded4320501086dc79cade1eb487e5589f4fa3e97e4ea.exe.exe windows:5 windows x86 arch:x86
8b71e94f8eed91168d0a3562aad48e3c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
cifx32dll
ord70
ord71
ord81
ord1
ord40
ord50
ord53
ord55
ord41
ord2
ord61
ord62
kernel32
FreeEnvironmentStringsA
CompareStringW
CompareStringA
GetTimeZoneInformation
GetLocaleInfoW
SetStdHandle
SetFilePointer
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoA
GetDateFormatA
GetTimeFormatA
Sleep
RaiseException
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
EnterCriticalSection
LeaveCriticalSection
GetCommandLineA
HeapValidate
IsBadReadPtr
IsDebuggerPresent
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
GetProcAddress
LoadLibraryA
DeleteCriticalSection
FatalAppExitA
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CreateFileA
CloseHandle
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThread
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
GetProcessHeap
VirtualQuery
FreeLibrary
RtlUnwind
InitializeCriticalSectionAndSpinCount
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
SetConsoleCtrlHandler
LoadLibraryW
WriteConsoleA
GetConsoleOutputCP
ReadFile
InterlockedExchange
FlushFileBuffers
GetConsoleCP
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.textbss Size: - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 368KB - Virtual size: 367KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ