eab34c5ec216a6914ca97c7c80b7f8601c41e65598ffe57bcc412dd55149e55e

Sharing

Copy URL

Twitter E-mail

General

Target

eab34c5ec216a6914ca97c7c80b7f8601c41e65598ffe57bcc412dd55149e55e
Size

15KB
MD5

b50129a27d85a6a70cfc3cdebce5662d
SHA1

66a3b7c09f9a1e1683a9c5d8ad91cba30c2b20b9
SHA256

eab34c5ec216a6914ca97c7c80b7f8601c41e65598ffe57bcc412dd55149e55e
SHA512

b12b1a7b14293f5ec1e92a2698fc88d473b113ed94fee47d96ba33613ce88c0551e8a1a50454722505517fcd7a6fe8e21679412d658a4fa58e85ad908b2abd35
SSDEEP

384:7KO+qj3mdBaZrBueENND2nzxRlUA0EXrjR84OEvz766u9Nfw6:7OOoCnzxRl70EX64OE77a9y6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eab34c5ec216a6914ca97c7c80b7f8601c41e65598ffe57bcc412dd55149e55e

Files

eab34c5ec216a6914ca97c7c80b7f8601c41e65598ffe57bcc412dd55149e55e
.exe windows:6 windows x86 arch:x86

de49dc2026ece8be3be5a17767f93aa9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\CODE\test\sdploader\Release\sdploader.pdb

Imports

kernel32

CreateProcessA
CloseHandle
GetLastError
WaitForSingleObject
GetCurrentProcess
GetModuleFileNameA
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
UnhandledExceptionFilter

advapi32

StartServiceA
CreateServiceA
StartServiceCtrlDispatcherA
CloseServiceHandle
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenSCManagerA

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ

vcruntime140

__current_exception
strrchr
_except_handler4_common
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
memcpy
memset
__std_terminate
__current_exception_context
_CxxThrowException
memmove

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_register_onexit_function
_crt_atexit
__p___argv
_invalid_parameter_noinfo_noreturn
_exit
_register_thread_local_exe_atexit_callback
_cexit
__p___argc
_c_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
terminate
_set_app_type
_seh_filter_exe
_controlfp_s

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de49dc2026ece8be3be5a17767f93aa9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 1024B - Virtual size: 756B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 1024B - Virtual size: 756B