0eeb1d8289ce5dccafb2cb196bdee8d78e39a2969b9e44e6e140ae792312685c

General

Target

0eeb1d8289ce5dccafb2cb196bdee8d78e39a2969b9e44e6e140ae792312685c
Size

56KB
MD5

f921aea6015df6c244857b3af3c4867d
SHA1

7c9f15753cd92252c0e6d2362260387e7496b01f
SHA256

0eeb1d8289ce5dccafb2cb196bdee8d78e39a2969b9e44e6e140ae792312685c
SHA512

52d902c4a2368f58827eb0cf77e9b346bc3d2233dd85b621cd9c8723dee1305ef744d822ead1891abc838f84712b6c1da666fad2cc70577168e8d5ef8883d818
SSDEEP

1536:iF9zZ8uk0hjQxMKgjKl2UtP+NADGzooS4cp5O:SzKuPQtx7tP4ClTO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eeb1d8289ce5dccafb2cb196bdee8d78e39a2969b9e44e6e140ae792312685c

Files

0eeb1d8289ce5dccafb2cb196bdee8d78e39a2969b9e44e6e140ae792312685c
.exe windows:4 windows x86 arch:x86

b670f2cd492376edc352dae2b6066846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\odin\miniloader\build\release\obj\src\main\miniloader-patchdate-stub.pdb

Imports

kernel32

ExitProcess
SetEvent
OpenEventW
SetCurrentDirectoryW
GetSystemDirectoryW
SetLastError
ExpandEnvironmentStringsW
GetStartupInfoW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
FindFirstFileW
FindClose
GetLocalTime
CreateThread
DeviceIoControl
SetErrorMode
GetVolumeInformationW
GetDiskFreeSpaceW
GetCommandLineW
GetDriveTypeW
SetVolumeLabelW
GetEnvironmentVariableW
Sleep
CloseHandle
SetStdHandle
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetFilePointer
GetLastError
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
LCMapStringW
LCMapStringA
MultiByteToWideChar
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
lstrcpyA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetModuleHandleA
GetVersion
GetCommandLineA
RtlUnwind
GetDriveTypeA
GetFullPathNameA
GetCurrentDirectoryA
GetCurrentProcess
TerminateProcess
HeapFree
HeapAlloc
GetProcessHeap
InterlockedExchange
InterlockedCompareExchange

msvcrt

free
_initterm
_amsg_exit
_adjust_fdiv
_except_handler4_common
_XcptFilter
malloc

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b670f2cd492376edc352dae2b6066846

Headers

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

Sections

.text Size: 28KB - Virtual size: 24KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: 28KB - Virtual size: 24KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 8KB - Virtual size: 6KB