5fdd1a12406f9a88acfecacd2e2e185bb5d1cbedabcf474246ed181caea561a0

Sharing

Copy URL Twitter E-mail

General

Target

5fdd1a12406f9a88acfecacd2e2e185bb5d1cbedabcf474246ed181caea561a0
Size

1.8MB
MD5

21698aee8720e0b9f2a6f6ea51058b7c
SHA1

7bf021b695cbf382c00848f79da5583e24954fca
SHA256

5fdd1a12406f9a88acfecacd2e2e185bb5d1cbedabcf474246ed181caea561a0
SHA512

a7ee28dcca0eefef212c7c10a8abf3787ed3ae59dc938ea9a13fa7431b51fb2d98d37a9f362b4ab1864e4ac57d9209e429dd10336b099ad2ccc9c0cd8b2c9727
SSDEEP

24576:2HdiLtQgbKBORCUAYzchxaH27w8lHTnicoP7LyTDz:2YijBqNzAxS9qHTn8qz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fdd1a12406f9a88acfecacd2e2e185bb5d1cbedabcf474246ed181caea561a0

Files

5fdd1a12406f9a88acfecacd2e2e185bb5d1cbedabcf474246ed181caea561a0
.dll windows:6 windows x64 arch:x64

a2e718035c21706feb907c90d650c280

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

tokio_macros-9bd7806496b36a92.pdb

Imports

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressAll
WakeByAddressSingle

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
CloseHandle
GetLastError
WaitForSingleObject
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
GetCurrentProcess
GetStdHandle
GetCurrentProcessId
HeapFree
HeapReAlloc
lstrlenW
ReleaseMutex
GetProcessHeap
HeapAlloc
GetConsoleMode
GetModuleHandleW
FormatMessageW
IsProcessorFeaturePresent
MultiByteToWideChar
WriteConsoleW
GetProcAddress
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId

ntdll

RtlNtStatusToDosError
NtWriteFile

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
_CxxThrowException
memcmp
memset
memcpy
__CxxFrameHandler3
memmove

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_seh_filter_dll
_cexit
_initterm
_initterm_e
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

free

Exports

Exports

__rustc_proc_macro_decls_896d742ecb9f7f53__
rust_metadata_tokio_macros_896d742ecb9f7f53

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 355KB - Virtual size: 354KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 616B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rustc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2e718035c21706feb907c90d650c280

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-core-synch-l1-2-0

kernel32

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 355KB - Virtual size: 354KB

.data Size: 512B - Virtual size: 616B

.pdata Size: 117KB - Virtual size: 116KB

.rustc Size: 16KB - Virtual size: 15KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 355KB - Virtual size: 354KB

.data
Size: 512B - Virtual size: 616B

.pdata
Size: 117KB - Virtual size: 116KB

.rustc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 4KB - Virtual size: 4KB