ifilttst.pdb
Static task
static1
General
-
Target
2a73bab41a03d3c4fef4d647985724deba8045bf64093f05a9409d41378dd991
-
Size
1.5MB
-
MD5
20289709b229b519ccaf693d7b652157
-
SHA1
fc808278586f441e3018a3e204b53076fa02ab49
-
SHA256
2a73bab41a03d3c4fef4d647985724deba8045bf64093f05a9409d41378dd991
-
SHA512
a0441cc64a12b3b21445893c0ac04bd3644936d8d102e30524d921269157a25cf0c59b1db9eb1748b9c6d414e4861b716296100c4187a363a333f7540906a537
-
SSDEEP
24576:Ov78NDFKYmKOF0zr31JwAlcR3QC0OXxc0H:m7gDUYmvFur31yAipQCtXxc0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2a73bab41a03d3c4fef4d647985724deba8045bf64093f05a9409d41378dd991
Files
-
2a73bab41a03d3c4fef4d647985724deba8045bf64093f05a9409d41378dd991.exe windows:10 windows x64 arch:x64
bf1d07799190adc65bc0de67cb6c0fd0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetFullPathNameW
GetModuleFileNameA
GetSystemTimeAsFileTime
FindFirstFileW
CreateSemaphoreExW
HeapFree
SetLastError
EnterCriticalSection
FindNextFileW
ReleaseSemaphore
GetModuleHandleExW
WaitForMultipleObjects
LeaveCriticalSection
InitializeCriticalSection
FindClose
WaitForSingleObject
GetFileAttributesW
GetCurrentThreadId
ReleaseMutex
QueryPerformanceCounter
CreateEventW
Sleep
FormatMessageW
GetLastError
OutputDebugStringW
SetEvent
WaitForSingleObjectEx
OpenSemaphoreW
CloseHandle
CreateThread
HeapSetInformation
HeapAlloc
GetProcAddress
CreateMutexExW
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
CreateSemaphoreW
DebugBreak
IsDebuggerPresent
GetPrivateProfileIntW
GetPrivateProfileStringW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetCommandLineW
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
ole32
PropVariantClear
CoTaskMemFree
CoCreateInstance
CLSIDFromString
OleUninitialize
OleInitialize
ntdll
NtQuerySystemInformation
query
LoadIFilter
msvcrt
fwprintf
exit
_vsnwprintf
memcpy_s
_wtoi
??1exception@@UEAA@XZ
??0exception@@QEAA@XZ
??0exception@@QEAA@AEBV0@@Z
_vsnprintf_s
?_set_new_handler@@YAP6AH_K@ZP6AH0@Z@Z
wcsrchr
_wcsicmp
wcstok
wcsstr
wcstoul
time
_wasctime
localtime
malloc
fputwc
free
_XcptFilter
_amsg_exit
__wgetmainargs
__set_app_type
_exit
_cexit
__setusermatherr
_initterm
_fmode
_commode
?terminate@@YAXXZ
_lock
_unlock
__dllonexit
_onexit
??1type_info@@UEAA@XZ
__iob_func
memset
_wfopen
fclose
wprintf
__C_specific_handler
__CxxFrameHandler3
memcpy
_callnewh
memcmp
_CxxThrowException
wcscmp
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE