bd8fd92618e6aa4c593d6c542b684afd07de0e92634f36bf92bb3288bdf03532

Sharing

Copy URL Twitter E-mail

General

Target

bd8fd92618e6aa4c593d6c542b684afd07de0e92634f36bf92bb3288bdf03532
Size

69KB
MD5

2fe22e69af01861c5c4bb6b58c819466
SHA1

07dda857fd0f4d42b943fad32f48f34bc83bbe23
SHA256

bd8fd92618e6aa4c593d6c542b684afd07de0e92634f36bf92bb3288bdf03532
SHA512

db8739e99f77f3d4f783262ffa8adffc396eda1ecd332c33c844fe40d5cacae8b86549591b704d931835029ac1db2157fdad74f4b83fb72bbd426427bc9265a9
SSDEEP

768:zNctwNO0t6TRVotkLu7Lzx5RCC2o4/fp27VhWWHW2y8f/ssSQ9tezGShVae:+td0OomL8ZCCUkhDpy0/nez3j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd8fd92618e6aa4c593d6c542b684afd07de0e92634f36bf92bb3288bdf03532

Files

bd8fd92618e6aa4c593d6c542b684afd07de0e92634f36bf92bb3288bdf03532
.exe windows:6 windows x64 arch:x64

7b0468fd001f79de0004f119368e8966

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\assemblage\Builds\105468828117391864ubfdwypuum\ParcelSketch-master\ParcelSketch\assemblage_outdir_bin\ParcelSketch.pdb

Imports

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
Sleep
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

ucrtbased

terminate
_cexit
_crt_at_quick_exit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
abort
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table

vcruntime140d

__FrameUnwindFilter
__C_specific_handler

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b0468fd001f79de0004f119368e8966

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

ucrtbased

vcruntime140d

mscoree

Sections

.text Size: 15KB - Virtual size: 15KB

.nep Size: 1KB - Virtual size: 1KB

.rdata Size: 47KB - Virtual size: 46KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 1024B - Virtual size: 528B

.gfids Size: 512B - Virtual size: 12B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 28B

.text
Size: 15KB - Virtual size: 15KB

.nep
Size: 1KB - Virtual size: 1KB

.rdata
Size: 47KB - Virtual size: 46KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 1024B - Virtual size: 528B

.gfids
Size: 512B - Virtual size: 12B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 28B