C:\assemblage\Builds\2147838349418265698jmpbjfptum\os-bench-windows-master\RAM_Access_Time\assemblage_outdir_bin\RAM_Access_Time.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3e0e2351668ce879ec4bc3942bb04cc0da9ae6ccfb0ee49a3ca6a43032922602.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3e0e2351668ce879ec4bc3942bb04cc0da9ae6ccfb0ee49a3ca6a43032922602.exe
Resource
win10v2004-20240802-en
General
-
Target
3e0e2351668ce879ec4bc3942bb04cc0da9ae6ccfb0ee49a3ca6a43032922602
-
Size
33KB
-
MD5
cb8e4b0257e0faa6f594748513a1bb41
-
SHA1
5a99f083cd1fe26a8335e2f36120f860c816f168
-
SHA256
3e0e2351668ce879ec4bc3942bb04cc0da9ae6ccfb0ee49a3ca6a43032922602
-
SHA512
f471c106c46314fe0f79f07ca92d08995a027a2571d35eca078c017a69b3364695995b28b604ae0b2586825efcadeb9575221799c89ec8dfde5fe23eb1af0ae9
-
SSDEEP
192:jiITpwAdEWpYpUjp+IjB05pvrEWejG9bSlTzRe1fB/SAXT3C2B2BI9E8O8sM0AFf:jiINdEWpYpGp+uklrEibtTXT3DcBuEA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3e0e2351668ce879ec4bc3942bb04cc0da9ae6ccfb0ee49a3ca6a43032922602
Files
-
3e0e2351668ce879ec4bc3942bb04cc0da9ae6ccfb0ee49a3ca6a43032922602.exe windows:6 windows x86 arch:x86
0576eb0bafce498d0f64904152c20518
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
QueryPerformanceCounter
QueryPerformanceFrequency
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
GetModuleHandleW
vcruntime140d
memset
_except_handler4_common
__current_exception_context
__std_type_info_destroy_list
__current_exception
ucrtbased
_initterm
_initterm_e
exit
_exit
_set_fmode
__p___argc
__p___wargv
free
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_initialize_wide_environment
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_controlfp_s
terminate
_configure_wide_argv
__stdio_common_vfprintf
fclose
fopen_s
__acrt_iob_func
_get_initial_wide_environment
__setusermatherr
_set_app_type
_seh_filter_exe
_seh_filter_dll
malloc
_cexit
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 512B - Virtual size: 474B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 270B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ