2099673d82f426259d076821bf6923ef996da04823ed9ee602881795c10aafd5N

Sharing

Copy URL Twitter E-mail

General

Target

2099673d82f426259d076821bf6923ef996da04823ed9ee602881795c10aafd5N
Size

34KB
MD5

e7365bf606afa2c0349f336ab85fe8a0
SHA1

deac219de9219a3c9c50bc2d4db1c7319ce0d2e5
SHA256

2099673d82f426259d076821bf6923ef996da04823ed9ee602881795c10aafd5
SHA512

12069c17968f0af10f750550f69e03a90680d7822acfbbec5d178f4e8f3d3f8676a86335770ab4b6eed3db32e3e6ae0458b0ab4af22514999625cc592d9be8e4
SSDEEP

768:BWUGwKyD79KjTR7gFGQK0/mpCBQ0V7b0++sQGPL4vzZq2o9W7GsxBbPr:sUGwKyD79K3R7gFGN0hdj+vGCq2iW7z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2099673d82f426259d076821bf6923ef996da04823ed9ee602881795c10aafd5N

Files

2099673d82f426259d076821bf6923ef996da04823ed9ee602881795c10aafd5N
.exe windows:6 windows x86 arch:x86

d0c25808e0936fe43f402a9472b02bb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\1\s\Win32\Release\idevicecrashreport.pdb

Imports

plist

plist_free
plist_dict_get_item
plist_get_node_type
plist_from_xml
plist_from_bin
plist_get_string_val

imobiledevice

lockdownd_start_service
afc_get_file_info
lockdownd_client_free
idevice_disconnect
afc_file_close
afc_client_free
afc_remove_path
afc_file_open
lockdownd_service_descriptor_free
lockdownd_client_new_with_handshake
idevice_new
afc_read_directory
afc_dictionary_free
idevice_free
afc_client_new
idevice_connect
idevice_connection_receive_timeout
afc_file_read
idevice_set_debug_level

vcruntime140

_except_handler4_common
memset
strrchr

api-ms-win-crt-stdio-l1-1-0

rewind
__stdio_common_vfprintf
fseek
fclose
__acrt_iob_func
fopen
ftell
fread
_set_fmode
__p__commode
fwrite

api-ms-win-crt-string-l1-1-0

strncpy
_strdup
strncmp

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
malloc

api-ms-win-crt-filesystem-l1-1-0

_stat64i32
remove
_mkdir

api-ms-win-crt-convert-l1-1-0

atoll
atoi

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
__p___argv
__p___argc
_seh_filter_exe
_exit
_initialize_onexit_table
_register_onexit_function
_c_exit
_set_app_type
exit
_initterm_e
_crt_atexit
_controlfp_s
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
terminate
_configure_narrow_argv
_cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

TerminateProcess
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetCurrentProcess
UnhandledExceptionFilter

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Z{��uv
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d0c25808e0936fe43f402a9472b02bb0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

plist

imobiledevice

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 920B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 728B

Z{��uv Size: 16KB - Virtual size: 20KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 920B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 728B

Z{��uv
Size: 16KB - Virtual size: 20KB