db8a39bfe8cbcda9f8bd2221e51e457967cd11ca73ad8472be1b36a8537ed0faN

Sharing

Copy URL Twitter E-mail

General

Target

db8a39bfe8cbcda9f8bd2221e51e457967cd11ca73ad8472be1b36a8537ed0faN
Size

108KB
MD5

ed3474dc5f2ec569b4ff95de2358efe0
SHA1

95bc3ea14741ad56d2700775d1ce4fab12287fde
SHA256

db8a39bfe8cbcda9f8bd2221e51e457967cd11ca73ad8472be1b36a8537ed0fa
SHA512

2fa7a1188a89c9b3d2028c5d724b0b5181bf545159fa0038499ea26eef579ae2400ac691dfb4a67a7345f9e663f55ea0dee33076599479dcca42deebea253624
SSDEEP

1536:fPtq+WXt5aX4VT2LNLABD2uTEPZ0dRfgP79JobCi8Uhy1JGCq2iW7z:fPtqXTK4VTeMbTHojzobOUhyTGCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db8a39bfe8cbcda9f8bd2221e51e457967cd11ca73ad8472be1b36a8537ed0faN

Files

db8a39bfe8cbcda9f8bd2221e51e457967cd11ca73ad8472be1b36a8537ed0faN
.exe windows:5 windows x86 arch:x86

cb46762fcfa1f5445523574654d821b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\linux-next\drivers\staging\usbip\userspace\src\Release\usbip.pdb

Imports

setupapi

SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

ws2_32

htonl
getaddrinfo
htons
ntohs
setsockopt
ntohl
socket
freeaddrinfo
send
getnameinfo
closesocket
connect
WSACleanup
WSAStartup
recv

kernel32

DeleteCriticalSection
CreateFileW
GetProcessHeap
SetEndOfFile
WriteConsoleW
SetStdHandle
GetStringTypeW
LCMapStringW
SetEnvironmentVariableA
MultiByteToWideChar
CompareStringW
SetFilePointer
IsProcessorFeaturePresent
HeapSize
FlushFileBuffers
GetConsoleMode
GetConsoleCP
FormatMessageA
CreateFileA
WriteFile
CreateEventA
ReadFile
GetOverlappedResult
GetLastError
DeviceIoControl
WaitForMultipleObjects
CloseHandle
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
HeapFree
HeapAlloc
EncodePointer
SetConsoleCtrlHandler
GetCommandLineA
HeapSetInformation
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
Sleep
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetModuleFileNameW
HeapCreate
WideCharToMultiByte
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapReAlloc

Sections

.text
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�?2�uZ
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cb46762fcfa1f5445523574654d821b8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

setupapi

ws2_32

kernel32

Sections

.text Size: 61KB - Virtual size: 60KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 11KB - Virtual size: 21KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 5KB - Virtual size: 5KB

�?2�uZ Size: 16KB - Virtual size: 20KB

.text
Size: 61KB - Virtual size: 60KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 11KB - Virtual size: 21KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 5KB - Virtual size: 5KB

�?2�uZ
Size: 16KB - Virtual size: 20KB