vmware_workstation_launcher.pdb
Static task
static1
1 signatures
General
-
Target
vmware-workstation-launcher.exe
-
Size
147KB
-
MD5
b736ff9232cfc563a903fc6ac6ddb57d
-
SHA1
98d63d2e098dbe71a065c21d48c2509d6403dc62
-
SHA256
00eb9d5e674adcb3b6f031636aaa84df0f7e62cca6497cac9e109e5c07367a6d
-
SHA512
ecdf206ce2d99ed7e00507ee55cb20a65f05e8c7ba1f8056fb0976410edc69dd2f7d61cc4186b80396b06d3fbaa9fa1da59ef1f309f879056617515e9b3de666
-
SSDEEP
3072:Gal7O0HEz9c/T0Qu8HsW1xKMH8TJwCWU:GaJO0HEzC/k8MWbFH8Tln
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource vmware-workstation-launcher.exe
Files
-
vmware-workstation-launcher.exe.exe windows:6 windows x64 arch:x64
e69dc8ccaaebebae8b7444ff8252bade
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
shell32
IsUserAnAdmin
ShellExecuteExW
kernel32
GetCurrentProcess
GetEnvironmentVariableW
GetCurrentDirectoryW
GetStdHandle
GetCurrentProcessId
SetLastError
RtlVirtualUnwind
RtlLookupFunctionEntry
IsDebuggerPresent
HeapReAlloc
lstrlenW
InitializeSListHead
RtlCaptureContext
QueryPerformanceCounter
GetConsoleMode
GetCurrentThread
GetModuleHandleW
GetModuleFileNameW
MultiByteToWideChar
WriteConsoleW
WideCharToMultiByte
GetModuleHandleA
GetProcAddress
HeapAlloc
SetThreadStackGuarantee
AddVectoredExceptionHandler
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
FormatMessageW
LoadLibraryExA
GetCurrentThreadId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
HeapFree
GetProcessHeap
CloseHandle
WaitForSingleObject
SetUnhandledExceptionFilter
GetLastError
ReleaseMutex
IsProcessorFeaturePresent
oleaut32
SysFreeString
GetErrorInfo
SysStringLen
ntdll
RtlNtStatusToDosError
NtWriteFile
vcruntime140
__current_exception
__current_exception_context
__CxxFrameHandler3
__C_specific_handler
_CxxThrowException
memcmp
memmove
memcpy
memset
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_seh_filter_exe
_initterm_e
exit
_exit
_get_initial_narrow_environment
_initialize_narrow_environment
__p___argc
terminate
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_set_app_type
_initterm
_crt_atexit
_initialize_onexit_table
_register_onexit_function
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 784B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 860B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ