4f03dcdedc03d384c82987c46738f7c1f5c7ced7f0d3252d3ec9cd0fe8960433

Sharing

Copy URL

Twitter E-mail

General

Target

4f03dcdedc03d384c82987c46738f7c1f5c7ced7f0d3252d3ec9cd0fe8960433
Size

10KB
MD5

b51766fec1686c5c596b08742caf48ed
SHA1

2f1beaaf3c95e1750d4322c0f407b51564c817ca
SHA256

4f03dcdedc03d384c82987c46738f7c1f5c7ced7f0d3252d3ec9cd0fe8960433
SHA512

134556865b55676093df91fa086535b9ab6e43c75227dfd1498663e78427576286715ea3078a87ff893d251952ace46b59e57c26c048c7bbd93f05eb5dfb52bf
SSDEEP

192:4UGQX407CNkoSKZsOtLnQgorjOESmYygh5yJqN:HGqMZscnQZrjjSmIh5r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f03dcdedc03d384c82987c46738f7c1f5c7ced7f0d3252d3ec9cd0fe8960433

Files

4f03dcdedc03d384c82987c46738f7c1f5c7ced7f0d3252d3ec9cd0fe8960433
.dll windows:6 windows x86 arch:x86

51bb0036aa2acd1f84e66255e03cdcc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Administrator\Documents\vcpkg\buildtrees\cargs\x86-o2-windows-rel\cargs.pdb

Imports

vcruntime140

__std_type_info_destroy_list
memset
_except_handler4_common
strchr

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
fputs

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_cexit

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent

Exports

Exports

cag_option_fetch
cag_option_get
cag_option_get_index
cag_option_get_value
cag_option_prepare
cag_option_print

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

51bb0036aa2acd1f84e66255e03cdcc5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 924B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 356B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 924B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 356B