ComputerHardwareIds.pdb
Static task
static1
General
-
Target
2b989cbc2088cc45cdc9bae5439e3540.exe
-
Size
611KB
-
MD5
2b989cbc2088cc45cdc9bae5439e3540
-
SHA1
7c38eb62c78ee8a413cb5e807c26919b9eb6e1b5
-
SHA256
94cda37a068ebb71929a7c222ed9a6bbf93085da43ab5d12dfe5e5f10a1d7d64
-
SHA512
130e668517a155855834e565f8516bc7273344eafb6aa394635cfbf34b9dccdf7f4b44fc441d9618c711ddad84059827ffaacd9a37e58ca892581c289adca750
-
SSDEEP
12288:byV3VfCfHcqNS0zKepmlDlpVfjp8EizX+AuV27snt5odJMsy:bqVg9N9JMlDlfjRiVuVsWt5MJMsy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2b989cbc2088cc45cdc9bae5439e3540.exe
Files
-
2b989cbc2088cc45cdc9bae5439e3540.exe.exe windows:10 windows x64 arch:x64
26284274dd19bd6814e0a94ae4e6b717
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
msvcrt
_initterm
__setusermatherr
_cexit
_exit
exit
__set_app_type
__C_specific_handler
_amsg_exit
_XcptFilter
wprintf
_fmode
wcschr
_vsnwprintf
_callnewh
malloc
free
_wtoi
_wcsdup
_wcsicmp
_commode
?terminate@@YAXXZ
memcpy
__wgetmainargs
memset
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
kernel32
QueryPerformanceCounter
GetLastError
MultiByteToWideChar
GetSystemFirmwareTable
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
SetUnhandledExceptionFilter
Sleep
bcrypt
BCryptCloseAlgorithmProvider
BCryptDestroyHash
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptHashData
BCryptCreateHash
BCryptFinishHash
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE