9e1acd245e2732faa04ef0a855aa4619fb2d81366a8c3f853f1ed73753c0e86b

Sharing

Copy URL Twitter E-mail

General

Target

9e1acd245e2732faa04ef0a855aa4619fb2d81366a8c3f853f1ed73753c0e86b
Size

1.1MB
MD5

841ea92aa2cf7d5f1b3029e3a6a0dc88
SHA1

880adca316d9ed4fc7ca9f235a4093fbdf9bf4b0
SHA256

9e1acd245e2732faa04ef0a855aa4619fb2d81366a8c3f853f1ed73753c0e86b
SHA512

215f534883444766f494b94baf3fa6ee8bea481f9c352c74f01719c960ba2f2744f9e7eee446b59b84d134c69e628d0ab70e4ecf36423f0627b5c5269b2e2b32
SSDEEP

12288:NQuB8Uwy4Rod+Bb19N7185SI0JlJtmKoD4A0IuIoFjucC5Z7vWL:TB3wjRod+Bb1911/lyKVTvSr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9e1acd245e2732faa04ef0a855aa4619fb2d81366a8c3f853f1ed73753c0e86b

Files

9e1acd245e2732faa04ef0a855aa4619fb2d81366a8c3f853f1ed73753c0e86b
.exe windows:6 windows x86 arch:x86

0cb1236c15a88b335d547b19139daf82

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Project\electron-addon\electron-update-driver\exe\build\build_x86\RelWithDebInfo\update-driver.pdb

Imports

updatedriversdk

UpdateDriver_SetDriverDownloadDir
UpdateDriver_CancelUpdateDisplayDeviceDriver
UpdateDriver_UpdateDisplayDeviceDriver
UpdateDriver_CancelCheckDisplayDeviceDriver
UpdateDriver_CheckDisplayDeviceDriver
UpdateDriver_GetDisplayDevice
UpdateDriver_GetSDKVersion
UpdateDriver_UninitSDK
UpdateDriver_InitSDK

kernel32

GetStringTypeW
ReadConsoleW
HeapSize
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
CreateFileA
ReadFile
WriteFile
CloseHandle
GetLastError
SetNamedPipeHandleState
PeekNamedPipe
GetEnvironmentStringsW
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObjectEx
Sleep
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
GetNativeSystemInfo
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
FormatMessageA
WideCharToMultiByte
SetFileInformationByHandle
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
CreateSymbolicLinkW
LocalFree
EncodePointer
DecodePointer
MultiByteToWideChar
LCMapStringEx
GetLocaleInfoEx
CreateFileW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RaiseException
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
ExitProcess
GetCurrentThread
HeapFree
HeapAlloc
OutputDebugStringW
SetConsoleCtrlHandler
GetTempPathW
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
SetFilePointerEx
HeapReAlloc
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW

Sections

.text
Size: 931KB - Virtual size: 931KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 145KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0cb1236c15a88b335d547b19139daf82

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

updatedriversdk

kernel32

Sections

.text Size: 931KB - Virtual size: 931KB

.rdata Size: 145KB - Virtual size: 144KB

.data Size: 18KB - Virtual size: 25KB

.idata Size: 5KB - Virtual size: 5KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 265B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 32KB - Virtual size: 32KB

.text
Size: 931KB - Virtual size: 931KB

.rdata
Size: 145KB - Virtual size: 144KB

.data
Size: 18KB - Virtual size: 25KB

.idata
Size: 5KB - Virtual size: 5KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 265B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 32KB - Virtual size: 32KB