a266ad1b47a263254ed07e5bd8aae051d16929e994b9831df6a3798260004a8d

Sharing

Copy URL Twitter E-mail

General

Target

a266ad1b47a263254ed07e5bd8aae051d16929e994b9831df6a3798260004a8d
Size

33KB
MD5

53f9c3bc30a23c2d6e309969043523ed
SHA1

16575f818844525ff38a317fb827f220485c5a60
SHA256

a266ad1b47a263254ed07e5bd8aae051d16929e994b9831df6a3798260004a8d
SHA512

4d62e0f54336f2e41faf34f75c23315191ff4b1af316761a8c48a0596198366c8c9345c90b1501f7ac453f8db1b451935cee3e1727ad14b33bc6e073a3befd1a
SSDEEP

384:j6Acx4/qs0kA7Im3NgxHEEbhipaAzqojmuGgJLw6CJ4BNs6B8yQsc/yS2vU:j6nxzTImexks8WylGgJLI4BNs6Oylf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a266ad1b47a263254ed07e5bd8aae051d16929e994b9831df6a3798260004a8d

Files

a266ad1b47a263254ed07e5bd8aae051d16929e994b9831df6a3798260004a8d
.exe windows:6 windows x64 arch:x64

5af2ef33ae5b294d87c8213839ece867

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Documents\vcpkg\buildtrees\yasm\x64-windows-rel\yasm.pdb

Imports

yasm

yasm_gettext_hook
yasm_fatal
yasm_internal_error_
yasm_xfree
yasm_xmalloc
yasm_list_modules
yasm_load_module
yasm_add_include_path
yasm_delete_include_paths
yasm__splitpath_win
yasm_object_optimize
yasm_object_set_global_suffix
yasm_object_set_global_prefix
yasm_object_finalize
yasm_object_destroy
yasm_object_create
yasm_floatnum_cleanup
yasm__xstrdup
yasm_floatnum_initialize
yasm_intnum_cleanup
yasm_xrealloc
yasm_intnum_initialize
yasm_errwarns_output_all
yasm_errwarns_num_errors
yasm_errwarns_destroy
yasm_errwarns_create
yasm_warn_disable_all
yasm_warn_disable
yasm_warn_enable
yasm_error_fetch
yasm_errwarn_cleanup
yasm_errwarn_initialize
yasm_linemap_set
yasm_linemap_destroy
yasm_linemap_create
yasm_vps_delete
yasm_vp_create_string
BitVector_Shutdown
BitVector_Boot
yasm__strcasecmp

kernel32

RtlLookupFunctionEntry
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
FreeLibrary
RtlCaptureContext
GetProcAddress
LoadLibraryA

vcruntime140

__C_specific_handler
strchr
strrchr
__current_exception
__current_exception_context
memset
memcpy

api-ms-win-crt-stdio-l1-1-0

fputc
__stdio_common_vfprintf
fopen
fwrite
__acrt_iob_func
_set_fmode
__stdio_common_vsprintf
__p__commode
fclose
fputs

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_exit
_initterm_e
_initterm
_register_thread_local_exe_atexit_callback
__p___argv
_register_onexit_function
_crt_atexit
terminate
_cexit
_set_app_type
__p___argc
_initialize_onexit_table
_c_exit
_initialize_narrow_environment
_get_initial_narrow_environment
exit
_seh_filter_exe

api-ms-win-crt-string-l1-1-0

strncmp
strcmp
tolower
isdigit
isspace

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5af2ef33ae5b294d87c8213839ece867

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

yasm

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 2KB - Virtual size: 4KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 428B

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 2KB - Virtual size: 4KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 428B