03ef349d3dbdc3664c72d77b1b4e031c09e2bad6113ab10af000935d608ef0ffN

Sharing

Copy URL Twitter E-mail

General

Target

03ef349d3dbdc3664c72d77b1b4e031c09e2bad6113ab10af000935d608ef0ffN
Size

34KB
MD5

15712ef64c918a8d889e74aaf81967a0
SHA1

aafa13ebfd5e6287b874f49f5fc6ac77f769c541
SHA256

03ef349d3dbdc3664c72d77b1b4e031c09e2bad6113ab10af000935d608ef0ff
SHA512

aabb5e211fc435c3d606425232cf7bbcf97c7c626035f1735f98651c32a655d41066e076a9c4699c4e213da5182159eda8ca82190e586a09feab45a2c6486b0d
SSDEEP

768:0Zf7u1IsxdhL3Cx09S2/Ga72/8bqFQGPL4vzZq2o9W7GsxBbPr:YC1IUdhLlwJ/8OiGCq2iW7z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03ef349d3dbdc3664c72d77b1b4e031c09e2bad6113ab10af000935d608ef0ffN

Files

03ef349d3dbdc3664c72d77b1b4e031c09e2bad6113ab10af000935d608ef0ffN
.exe windows:6 windows x86 arch:x86

0a7e4fa200835b0a9cfa0e902db85070

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\a\1\s\Win32\Release\idevicecrashreport.pdb

Imports

kernel32

IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW

imobiledevice

service_receive_with_timeout
service_client_new
afc_read_directory
afc_dictionary_free
afc_file_read
idevice_free
afc_client_new
lockdownd_service_descriptor_free
afc_remove_path
afc_client_free
afc_file_open
service_client_free
afc_file_close
lockdownd_client_new_with_handshake
idevice_set_debug_level
idevice_new_with_options
lockdownd_client_free
afc_get_file_info
lockdownd_start_service

plist

plist_get_string_val
plist_free
plist_dict_get_item
plist_get_node_type
plist_from_xml
plist_from_bin

vcruntime140

__current_exception
__current_exception_context
_except_handler4_common
strrchr
memset

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
fopen
fclose
__acrt_iob_func
fread
fseek
__stdio_common_vfprintf
fwrite
rewind
ftell

api-ms-win-crt-string-l1-1-0

strncpy
_strdup
strncmp

api-ms-win-crt-heap-l1-1-0

free
malloc
_set_new_mode

api-ms-win-crt-runtime-l1-1-0

__p___argc
_get_initial_narrow_environment
exit
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_narrow_environment
_configure_narrow_argv
_crt_atexit
_controlfp_s
terminate
_initialize_onexit_table
_set_app_type
_initterm
_initterm_e
_register_onexit_function
_exit
_seh_filter_exe

api-ms-win-crt-convert-l1-1-0

atoll
atoi

api-ms-win-crt-filesystem-l1-1-0

_mkdir
remove
_stat64i32

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

'w��u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0a7e4fa200835b0a9cfa0e902db85070

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

imobiledevice

plist

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 920B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 760B

'w���u� Size: 16KB - Virtual size: 20KB

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 920B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 760B

'w��u�
Size: 16KB - Virtual size: 20KB