99276613e20a0f55bb2e7b550c042b546d96b6790fcab9398d705df2201e3254

Sharing

Copy URL

Twitter E-mail

General

Target

99276613e20a0f55bb2e7b550c042b546d96b6790fcab9398d705df2201e3254
Size

1.1MB
MD5

46104f7ba95ffaa016f8c58535dbc476
SHA1

d157b6a1b48650c2f08150224b20c39e0d5dadee
SHA256

99276613e20a0f55bb2e7b550c042b546d96b6790fcab9398d705df2201e3254
SHA512

ec2f5752f60b0e9fa81ef67133de7a698cc130d78525720f972c01a0b49ff6ecfb5d80b646a5c0307e66a429b6f7cda7fb341a13ed3cd5a58ce7919dd82d27e9
SSDEEP

12288:BtEwiJMd1YxgfhG1PTrWmzJ0vgDlt6DhGsaPvNl3/rVvg8ImC9SeQRRiz00hg8uN:B2w/ExdztiEz6NGsK3je2PlYoVdH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99276613e20a0f55bb2e7b550c042b546d96b6790fcab9398d705df2201e3254

Files

99276613e20a0f55bb2e7b550c042b546d96b6790fcab9398d705df2201e3254
.exe windows:6 windows x86 arch:x86

ee2d99946432b074f07fc6d2604c2bfb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

F:\C\mimikatz++\Release\mimikatz++.pdb

Imports

kernel32

SizeofResource
VirtualProtect
VirtualAlloc
CreateToolhelp32Snapshot
Process32NextW
LoadLibraryA
Process32FirstW
LoadResource
FindResourceW
GetProcAddress
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
UnhandledExceptionFilter
QueryPerformanceCounter
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

vcruntime140

__current_exception
__current_exception_context
memset
_except_handler4_common
memcpy

api-ms-win-crt-runtime-l1-1-0

exit
_initialize_onexit_table
_c_exit
_crt_atexit
_controlfp_s
terminate
_seh_filter_exe
_cexit
_register_thread_local_exe_atexit_callback
__p___argv
_register_onexit_function
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__p___argc
_set_app_type

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
_set_fmode
__stdio_common_vfprintf

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee2d99946432b074f07fc6d2604c2bfb

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 904B

.rsrc Size: 1.0MB - Virtual size: 1.0MB

.reloc Size: 512B - Virtual size: 396B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 904B

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

.reloc
Size: 512B - Virtual size: 396B