eec4b37eb9f33bf7dd20900dea7ad4a900490ed0685b07ed561487e7af931850

Sharing

Copy URL Twitter E-mail

General

Target

eec4b37eb9f33bf7dd20900dea7ad4a900490ed0685b07ed561487e7af931850
Size

71KB
MD5

1e57fb113f0a3894366eae00fedd97ac
SHA1

afda1552da7c75b10b080130f64ecbb886a951d5
SHA256

eec4b37eb9f33bf7dd20900dea7ad4a900490ed0685b07ed561487e7af931850
SHA512

369eee0ff12e18f8087a71942911cd39c872cfbb3d0b0ddd2703c7dd3a8601997a961227189c5d7d57d81469ac17b06ee910b6351bf431ca43ecbece4e5231d6
SSDEEP

768:mJbUW9xQm5zhpj7aMvQTUMjEOVW1rH77a6dBP9CVFjcQ3J7/lcF4YGfH6:4bUW9xj5DKUBuW1e6dj6Jrc4YG/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eec4b37eb9f33bf7dd20900dea7ad4a900490ed0685b07ed561487e7af931850

Files

eec4b37eb9f33bf7dd20900dea7ad4a900490ed0685b07ed561487e7af931850
.dll windows:6 windows x86 arch:x86

a95ec0f594f67e5bf206c4f27cd7741e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

F:\vcpkg\buildtrees\fastfeat\x86-windows-rel\fastfeat.pdb

Imports

vcruntime140

memset
_except_handler4_common
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

realloc
free
malloc

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_cexit

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead

Exports

Exports

fast10_corner_score
fast10_detect
fast10_detect_nonmax
fast10_score
fast11_corner_score
fast11_detect
fast11_detect_nonmax
fast11_score
fast12_corner_score
fast12_detect
fast12_detect_nonmax
fast12_score
fast9_corner_score
fast9_detect
fast9_detect_nonmax
fast9_score
nonmax_suppression

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a95ec0f594f67e5bf206c4f27cd7741e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 65KB - Virtual size: 65KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 912B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 448B

.text
Size: 65KB - Virtual size: 65KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 912B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 448B