reported_smbios_viewer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

reported_smbios_viewer.exe
Size

14.0MB
MD5

e97b35380538da1c3f59bbecbe15cb93
SHA1

e1e588db5051ff1bb1e0700a19e2c1f2a727f63f
SHA256

6d46732302571bf2c325e796d121adbf35ea9f423e1965a5efab4e331d2e5d6d
SHA512

43e4fb18c7918274a6a5794de6cf7b52a4c41fa06e8ff9a75fe7e6a9baefc9dc780347886e45ea792aef0765dd35ce7ff0e505e0dda51d1518cf34b03c3f10fb
SSDEEP

393216:ru1MdkeUo4k0FdLz7d+rPTCicRnDhXYpv/wO:ree74k0FdD6c1D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
reported_smbios_viewer.exe

Files

reported_smbios_viewer.exe
.exe windows:6 windows x64 arch:x64

71d40bc34ee2f8a2a6193947be16a43c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

InitializeSListHead

user32

ShowWindow

gdi32

CreateSolidBrush

shell32

ShellExecuteW

msvcp140

?_Xbad_function_call@std@@YAXXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

terminate

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-stdio-l1-1-0

__p__commode

api-ms-win-crt-math-l1-1-0

ceilf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.uOj
Size: - Virtual size: 8.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.R>~
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.G\7
Size: 14.0MB - Virtual size: 14.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71d40bc34ee2f8a2a6193947be16a43c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: - Virtual size: 34KB

.rdata Size: - Virtual size: 11KB

.data Size: - Virtual size: 2KB

.pdata Size: - Virtual size: 1KB

.uOj Size: - Virtual size: 8.8MB

.R>~ Size: 512B - Virtual size: 256B

.G\7 Size: 14.0MB - Virtual size: 14.0MB

.reloc Size: 512B - Virtual size: 244B

.text
Size: - Virtual size: 34KB

.rdata
Size: - Virtual size: 11KB

.data
Size: - Virtual size: 2KB

.pdata
Size: - Virtual size: 1KB

.uOj
Size: - Virtual size: 8.8MB

.R>~
Size: 512B - Virtual size: 256B

.G\7
Size: 14.0MB - Virtual size: 14.0MB

.reloc
Size: 512B - Virtual size: 244B