CVE-2020-1350-master.zip
- SHA256 27c35e0ae89d5526efb4a9a4fe8210907a31df70659d113945e01b57e4af426e
Overview
overview
8Static
static
3CVE-2020-1...50.exe
windows10-2004-x64
3CVE-2020-1...50.exe
windows11-ltsc_2024-x64
3CVE-2020-1...ix.bat
windows10-2004-x64
3CVE-2020-1...ix.bat
windows11-ltsc_2024-x64
3CVE-2020-1...oC.exe
windows10-2004-x64
1CVE-2020-1...ME.pdf
windows10-2004-x64
7CVE-2020-1...ME.pdf
windows11-ltsc_2024-x64
4CVE-2020-1...oit.sh
windows10-2004-x64
3CVE-2020-1...oit.sh
windows11-ltsc_2024-x64
3CVE-2020-1...it.ps1
windows10-2004-x64
8CVE-2020-1...it.ps1
windows11-ltsc_2024-x64
8Behavioral task
behavioral1
Sample
CVE-2020-1350-master/CVE-2020-1350.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
CVE-2020-1350-master/CVE-2020-1350.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
CVE-2020-1350-master/Fix.bat
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
CVE-2020-1350-master/Fix.bat
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
CVE-2020-1350-master/PoC.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
CVE-2020-1350-master/README.pdf
Resource
win10v2004-20260911-en
windows10-2004-x64
14 signatures
150 seconds
Behavioral task
behavioral7
Sample
CVE-2020-1350-master/README.pdf
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
13 signatures
150 seconds
Behavioral task
behavioral8
Sample
CVE-2020-1350-master/exploit.sh
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
CVE-2020-1350-master/exploit.sh
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral10
Sample
CVE-2020-1350-master/windows-exploit.ps1
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral11
Sample
CVE-2020-1350-master/windows-exploit.ps1
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
5 signatures
150 seconds
General
- Target CVE-2020-1350-master.zip
- Size 212KB
- Sample261027-da9a6axy7n
- SHA256 27c35e0ae89d5526efb4a9a4fe8210907a31df70659d113945e01b57e4af426e
- MD5 d7220bc67ddfbcb272ddfaf72f45e503
- SHA1 838b1027d76ba39fb2fc505aa3b14b13d3fa6b6a
- SHA512 7f2e326e0bf0627cde0a671ba25d63aa047c37cd0b590e83b999c866a49c533e7539e0791f48048e70de573b1c2564911e24310acb92d8101f3cce4067c0798a
- SSDEEP 3072:5XdRKVYCSkWiFth1PxPrEx/5Zml8mRe0ehykahH/QggyXIInSqI7iCE6PCCg9dUf:5XQ6Whdx45DmwTHGH/QVyYsCE6dE6/aM
- TLSH T12624134A2584AC27CE560731DB1FB19BA678E7085201C915381FAAF83DCBC69CF175BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CVE-2020-1350-master/CVE-2020-1350.exe - Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/CVE-2020-1350-master/PoC.exe
File Explorer
-
CVE-2020-1350-master.zip.zip 212KB
-
CVE-2020-1350-master/.github/ISSUE_TEMPLATE/bug_report.md834B
-
CVE-2020-1350-master/.vs/CVE-2020-1350/config/applicationhost.config.xml 82KB
-
CVE-2020-1350-master/.vs/CVE-2020-1350/v16/.suo24KB
-
CVE-2020-1350-master/.vs/ProjectSettings.json35B
-
CVE-2020-1350-master/.vs/slnx.sqlite88KB
-
CVE-2020-1350-master/.vs/tasks.vs.json158B
-
CVE-2020-1350-master/CVE-2020-1350.exe.exe 118KB
-
CVE-2020-1350-master/Fix.bat170B
-
CVE-2020-1350-master/PoC.exe.exe 284KB
-
CVE-2020-1350-master/README.md755B
-
CVE-2020-1350-master/README.pdf.pdf 4KB
-
CVE-2020-1350-master/exploit.sh185B
-
CVE-2020-1350-master/windows-exploit.ps1.ps1 36KB
CVE-2020-1350-master/.github/ISSUE_TEMPLATE/bug_report.md
- SHA256 0c8d64f29fb4536513653bf8c97da30f3340e2041b91c8952db1515d6b23a7b3
- MD5 e468801d29e6b66b0d496136e22e8b34
- SHA1 83d211c67c12e8c1f6e9f796cfd0cecbf5160e15
- SHA512 764dd839b31e1a112eed1a9f61bb215b276af1975b15335054e591942445826d3924c73bf7d1ae968c5c93b1cdeb0bdd2ba0db4b02c599ecc35a6d1f7527485b
- TLSH T1930112B7C91FB1135271214F5967C3F97B7917644288C226BCA2D22806CD2EC9B3B2C4
- MD5 SHA1 SHA512 TLSH
CVE-2020-1350-master/.vs/CVE-2020-1350/config/applicationhost.config
- SHA256 2e05cc00b87eaa6561a5b8add0388572f04295041496c7af687fad7875ea326a
- MD5 67dcabe80551e586d76a6feb7a89f780
- SHA1 908bc3776ffec5fed2332129f290d586768795e8
- SHA512 52867c21d20df2cfd2dc7e06b10a14e62c56efc991632392dd85bdda7f1a0eee2c61b610633de4f0ccc035876bdb50acd84084a14c2e0a0626dc6b6ce204e03f
- SSDEEP 768:FaVADMMXBHKqIv6Yn+tGGxSh7RrxE04Bz:LDMe95ZYn+tzA9nE04Bz
- TLSH T183832D9268A7ECE3851F5976EFE189403FA9269B7E48719CB4EE24203F156C407D7BC0
- MD5 SHA1 SHA512 SSDEEP TLSH
CVE-2020-1350-master/.vs/CVE-2020-1350/v16/.suo
- SHA256 3bf4a0181e70123f994e296580b8482ce6be1a3ee416d9358b8be412b7c6d159
- MD5 f0bc5fb0f7e5f847a2c40c19f353635b
- SHA1 86789d6e5bdd0ff48749bf22bf96b53fb05fd385
- SHA512 9551c0f5497e88a1fe266fa17aac2ff72f150d4969826f993832d49470b6a7205d91915111488bd27291ee56ec19dfe2ee77ec7b55b344f34a8d0462677ac8b2
- SSDEEP 96:+2JG2h8JUUEZpB8nelyVDDAKBzzBdxwouI6gvK7I2y09WXxdSMnMObgL6Ya5lvGW:bQfqyVDPtMOb3roQUOhyVSkdMOb3r
- TLSH T177B2560423F88519F3F38EB16DF5855A6473FC23AE29D10E20A1774E0973E66D964B1B
- MD5 SHA1 SHA512 SSDEEP TLSH
CVE-2020-1350-master/.vs/ProjectSettings.json
- SHA256 3fb4183a29d0406670017368894d9e1dbe7f150193f4e7827669259293f39693
- MD5 dfea8ab09c8108ab159b6d8f203ead68
- SHA1 240f94a9146fcd7ff4ac2dfafd7f15a0c6e2a247
- SHA512 a18c5ada9e592db54a1b0e524a05a9e795baf8c7a0390a8986c13bc390b376d09f1bdffc719e30addc180b56bad89c614005dfb4dbfea1aa0b91559002f1b227
- MD5 SHA1 SHA512
CVE-2020-1350-master/.vs/slnx.sqlite
- SHA256 2f1a43c8c323a0a60a3c5e33ee67b1487b70a6e207df747adc4c8ee5f03ecf48
- MD5 459a24acf84a79a57b98076353e88d2d
- SHA1 b2074980ca6d39b816cdf1d177d9b7dc5bb84065
- SHA512 7df1efd03fdb92d499c5bd4c17c6a0fb14a30dc11dc43bc7251f9a1d7fecc31830cedcc92f55107fc49866020725181e8d807e9981aabbe2143a1560e6a2030d
- SSDEEP 192:sGThURYbTK6SktS+lfA1DtZudA+L0mWMehtCoy2O5o1R9/eGyF2FCHCGThURYbT9:A+oy2O5o1R9/4mn7
- TLSH T1FB930E6E3799A905C1B05339E8B29DA2C930213BA562C1757CFD12A8CFB3B0457B9FD4
- MD5 SHA1 SHA512 SSDEEP TLSH
CVE-2020-1350-master/.vs/tasks.vs.json
- SHA256 7f7a302cdb2918315aab8ed384ef1174439fe9b0f26132be70f91a32e68c86f9
- MD5 7c945b29bc0ea56db8ad7a323805aff8
- SHA1 25cca238be39f823be06cc7cdc889fec507f3286
- SHA512 1b022c63d9d5b2c083e1ddd28d31f7bddd1e9b741b87bc5f3fd6684bbbe061bc89f0c42d26fd5a542fd3dfa88d536a0a3f19528f2c4a749576401c50c1456815
- TLSH T190C08C3C8017481308821A1412FCC18381302E57055A384EBB4C40B88F888BB3D1C748
- MD5 SHA1 SHA512 TLSH
CVE-2020-1350-master/CVE-2020-1350.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 9e6da40db7c7f9d5ba679e7439f03ef6aacee9c34f9a3f686d02af34543f2e75
- MD5 41c75f8a0050dc1a5dba0f6c965a5b9e
- SHA1 8d86a686997d955b10ddeb4394f4c0db83fc4082
- SHA512 8f032bb9f5902f507c3862173029002ad1b012354de79cd5a6b8bb72a53e7ebe814665c638b21dcdd54a933b7192557abb3674f322a97aa99ecea88b029bb529
- SSDEEP 384:I1i5pEh3N0W6ALPtGaSxH22WDllIwgkvwKwq6uGWFT1T52VxKV4nYLjB88ah4UwD:eiLe9xU2PllIwF3m4yYLj+8ahZ7IiOb
- TLSH T1DBC33C13B244F625C44B36B7CB918E452762AE429C2C96FF264C76BE09F21E54A03F7D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
126950
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\anowlin\source\repos\CVE-2020-1350\obj\Release\CVE-2020-1350.pdb
mscoree
_CorExeMain
Name
.text
Size
116KB
Virtual Size
115KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
CVE-2020-1350-master/Fix.bat
- SHA256 df273ba078021ddc30f1e09987791e3385af87a0cc517ff591e3cf6d55a3609e
- MD5 4ad32b22ff9f467d0083186c2ac045af
- SHA1 832761669729c9b977180096600739c93435d97f
- SHA512 d73a9924bdcff01d41bbfc89747caefafc40fcc1ceacb7eeb3584acdec713ec1e649f53bd23a7389a9c5ec6173ea23cda508c5862fe6b8c0f320b9a01f00f473
- TLSH T1E7C0C01688130151407001022BB2D260373D50C32045CBC6089D070311CFC23004F398
- MD5 SHA1 SHA512 TLSH
CVE-2020-1350-master/PoC.exe
- IMPHASH 272245e2988e1e430500b852c4fb5e18
- SHA256 bf9657ff82065a676bc2aeb07877d5964a193da244e943ee37f08b931c9868b7
- MD5 73876f65f8c4951cc7c1c06e2af756ae
- SHA1 fa43a7427f16091df76318d5bc5bbde1a3656bb3
- SHA512 c68f761510716be37af8755dd45e039a15e6e6bcb694b2bd714d79df4582e24be4d8604de33d73ce90e23550115432706062976ba80f767e9619711b36ee295d
- SSDEEP 6144:RoccOhV7GsyLNOWAIzdzpiU7EjcWZSTvUbtckxm01:2OhUR8CdzcU7ucWETvy+kxF1
- TLSH T19854391E23991CE5D923923DD903C265C6B27C31631196EF22D0CD7B6F63AE97A38B05
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
35:10:ad:f4:c6:18:31:b6:86:17:f8:b2:1b:8d:2e:e1:66:21:d7:47
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Microsoft Windows,O=Microsoft Corporation,C=US
Chains
Oct 26, 2026
CN=Microsoft Windows,O=Microsoft Corporation,C=US
Subject
CN=Microsoft Windows,O=Microsoft Corporation,C=US
Serial Number
Issuer
CN=Thinkst Root CA,OU=Thinkst Applied Research CA,O=Thinkst Applied Research,C=ZA
Key Usages
KeyUsageDigitalSignature, KeyUsageKeyEncipherment, KeyUsageDataEncipherment, KeyUsageKeyAgreement
Ext Key Usages
ExtKeyUsageServerAuth, ExtKeyUsageClientAuth, ExtKeyUsageCodeSigning
Timespan
Jul 14, 2020 - Jul 14, 2030
Minor OS version
0
Major OS version
10
Entry point
102240
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
cmd.pdb
msvcrt
_setmode
exit
iswxdigit
time
srand
_wtol
fflush
wcsstr
iswalpha
wcstoul
_errno
printf
rand
fprintf
wcsncmp
_pipe
_commode
_lock
wcsrchr
realloc
towlower
_initterm
__setusermatherr
setlocale
_wcsupr
iswdigit
_ultoa
_cexit
_unlock
_exit
__dllonexit
_wcsicmp
iswspace
wcschr
fgets
??_V@YAXPEAX@Z
_pclose
ferror
_onexit
__CxxFrameHandler3
_open_osfhandle
_close
feof
_dup
_wpopen
_wcsnicmp
?terminate@@YAXXZ
memset
wcstol
_get_osfhandle
_dup2
_getch
towupper
memcmp
_setjmp
wcsspn
_fmode
qsort
__set_app_type
_tell
_wcslwr
longjmp
_local_unwind
_purecall
__C_specific_handler
??3@YAXPEAX@Z
memcpy_s
free
calloc
__getmainargs
_XcptFilter
_amsg_exit
??1type_info@@UEAA@XZ
memmove
memcpy
_CxxThrowException
_vsnwprintf
swscanf
__iob_func
malloc
_callnewh
??0exception@@QEAA@AEBQEBD@Z
??0exception@@QEAA@AEBQEBDH@Z
??0exception@@QEAA@AEBV0@@Z
??1exception@@UEAA@XZ
?what@exception@@UEBAPEBDXZ
wcscmp
ntdll
RtlLookupFunctionEntry
RtlCaptureContext
NtOpenProcessToken
NtQueryInformationToken
NtClose
NtOpenThreadToken
RtlFreeHeap
NtFsControlFile
RtlDosPathNameToNtPathName_U
RtlVirtualUnwind
RtlFreeUnicodeString
RtlReleaseRelativeName
NtOpenFile
RtlDosPathNameToRelativeNtPathName_U_WithStatus
NtSetInformationFile
NtQueryVolumeInformationFile
NtSetInformationProcess
NtQueryInformationProcess
RtlNtStatusToDosError
NtCancelSynchronousIoFile
RtlCreateUnicodeStringFromAsciiz
RtlFindLeastSignificantBit
api-ms-win-core-kernel32-legacy-l1-1-0
CopyFileW
GetConsoleWindow
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleW
GetModuleFileNameA
LoadLibraryExW
GetProcAddress
GetModuleFileNameW
GetModuleHandleExW
api-ms-win-core-synch-l1-1-0
CreateSemaphoreExW
InitializeCriticalSection
WaitForSingleObject
ReleaseSemaphore
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
ReleaseMutex
ReleaseSRWLockShared
AcquireSRWLockShared
LeaveCriticalSection
CreateMutexExW
EnterCriticalSection
ReleaseSRWLockExclusive
OpenSemaphoreW
api-ms-win-core-heap-l1-1-0
HeapFree
HeapAlloc
GetProcessHeap
HeapSetInformation
HeapReAlloc
HeapSize
api-ms-win-core-errorhandling-l1-1-0
SetLastError
UnhandledExceptionFilter
GetLastError
SetErrorMode
SetUnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-0
InitializeProcThreadAttributeList
GetCurrentThreadId
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
GetStartupInfoW
CreateProcessAsUserW
OpenThread
CreateProcessW
ResumeThread
TerminateProcess
GetExitCodeProcess
GetCurrentProcess
GetCurrentProcessId
api-ms-win-core-localization-l1-2-0
GetThreadLocale
SetThreadLocale
FormatMessageW
GetLocaleInfoW
GetCPInfo
GetACP
GetUserDefaultLCID
api-ms-win-core-debug-l1-1-0
OutputDebugStringW
DebugBreak
IsDebuggerPresent
api-ms-win-core-handle-l1-1-0
DuplicateHandle
CloseHandle
api-ms-win-core-memory-l1-1-0
VirtualAlloc
VirtualQuery
VirtualFree
ReadProcessMemory
api-ms-win-core-console-l1-1-0
ReadConsoleW
SetConsoleCtrlHandler
SetConsoleMode
WriteConsoleW
GetConsoleMode
GetConsoleOutputCP
api-ms-win-core-file-l1-1-0
CreateFileW
FlushFileBuffers
GetFileAttributesExW
GetDriveTypeW
FindClose
FindNextFileW
CreateDirectoryW
GetVolumeInformationW
SetFileAttributesW
SetEndOfFile
SetFilePointerEx
WriteFile
DeleteFileW
SetFileTime
GetVolumePathNameW
SetFilePointer
ReadFile
GetFileAttributesW
GetFileType
RemoveDirectoryW
FindFirstFileExW
CompareFileTime
GetFullPathNameW
GetDiskFreeSpaceExW
FileTimeToLocalFileTime
GetFileSize
FindFirstFileW
api-ms-win-core-string-l1-1-0
WideCharToMultiByte
MultiByteToWideChar
api-ms-win-core-processenvironment-l1-1-0
GetCommandLineW
GetEnvironmentStringsW
ExpandEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SearchPathW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetEnvironmentVariableW
SetEnvironmentStringsW
GetStdHandle
api-ms-win-core-console-l2-1-0
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
ScrollConsoleScreenBufferW
FillConsoleOutputAttribute
FillConsoleOutputCharacterW
FlushConsoleInputBuffer
SetConsoleTextAttribute
api-ms-win-security-base-l1-1-0
GetFileSecurityW
RevertToSelf
GetSecurityDescriptorOwner
api-ms-win-core-sysinfo-l1-1-0
GetSystemTime
SetLocalTime
GetSystemTimeAsFileTime
GetTickCount
GetWindowsDirectoryW
GetLocalTime
GetVersion
api-ms-win-core-timezone-l1-1-0
SystemTimeToFileTime
FileTimeToSystemTime
api-ms-win-core-datetime-l1-1-0
GetDateFormatW
GetTimeFormatW
api-ms-win-core-systemtopology-l1-1-0
GetNumaNodeProcessorMaskEx
GetNumaHighestNodeNumber
api-ms-win-core-console-l2-2-0
SetConsoleTitleW
GetConsoleTitleW
api-ms-win-core-processenvironment-l1-2-0
NeedCurrentDirectoryForExePathW
api-ms-win-core-registry-l1-1-0
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegEnumKeyExW
RegDeleteKeyExW
RegDeleteValueW
RegQueryValueExW
api-ms-win-core-file-l2-1-0
MoveFileExW
CreateSymbolicLinkW
CreateHardLinkW
MoveFileWithProgressW
GetFileInformationByHandleEx
api-ms-win-core-heap-l2-1-0
GlobalAlloc
GlobalFree
LocalFree
api-ms-win-core-io-l1-1-0
DeviceIoControl
api-ms-win-core-winrt-l1-1-0
RoInitialize
RoUninitialize
api-ms-win-core-processtopology-l1-1-0
GetThreadGroupAffinity
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-string-obsolete-l1-1-0
lstrcmpW
lstrcmpiW
api-ms-win-core-processtopology-obsolete-l1-1-0
SetProcessAffinityMask
api-ms-win-core-apiquery-l1-1-0
ApiSetQueryApiSetPresence
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0
DelayLoadFailureHook
Name
.text
Size
196KB
Virtual Size
195KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
41KB
Virtual Size
41KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
111KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.didat
Size
512B
Virtual Size
144B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
33KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
780B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=70, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=27412,
count=22, id=260, version=27412,
count=297, id=1, productName=Unmarked objects,
count=5, id=257, version=27412,
count=9, id=261, version=27412,
count=41, id=269, version=27412,
count=1, id=255, version=27412,
count=1, id=258, version=27412,
CVE-2020-1350-master/README.md
- SHA256 0ec0642ac67e45f4937c6926e572f55386640fef810c5f3cec7849622a59d0d2
- MD5 710d69d5cc297d434fa1ff4dd85b80d4
- SHA1 8ed1a5bbaffadfe5f112a0919f7c41f8fd6f9d18
- SHA512 07c3518ba70f5e6ce710274fdd414d5f24176bed489e1f739bf984cab80d7304b417e704c9351a43a479d62364ff7886558eb9d69a33c6cd9ce6b9bb4bb28c58
- TLSH T121019CF3513602319D97834232D6B3F6353A11D6A69A898BCC28001B218FE67C46B1C4
- MD5 SHA1 SHA512 TLSH
CVE-2020-1350-master/README.pdf
- SHA256 9f652a9d51bb3ec1edb45540fee3e84cd9fa57c50c5aa927410d38d78359bda5
- MD5 f13923f77bce3b3f30d50e1692548180
- SHA1 20c383b47029f731a6729f506e65d4ef2029da0c
- SHA512 9420ea6888fa77194fc56570afff9c9d4adbaefe255b72fc40e8521fca8238aea172a06d3f2dd094955eabb64203dd345879f714cb5a5a388fab7cdd0ea9279b
- SSDEEP 48:3yrlnqCLcUE3RB21CQJHPuZyqXC+kjF+RqItCi8qCuth:3yJ5E3KVJD2kjsTtpD
- TLSH T1EDB1A8ED96A23D4414127C717BE4599BC49790CB28882C03795C8E5B5F00FB3BA76ED3
- MD5 SHA1 SHA512 SSDEEP TLSH
Extracted URLs
-
file http://29cey7dfvpl7vurecguiblsii.canarytokens.net/OMFJHDOTQHYCJWCYVJDCSJPRMGKWPCCMAW
CVE-2020-1350-master/exploit.sh
- SHA256 e085ae114095009aa79df0db5585e5513e466ffb17f98aaeebb5951a665d6811
- MD5 1e63b0b2f4076fc6d9946651622fb3cf
- SHA1 a35d9d877a1be2cf0926dfdb35a47caa48b356e3
- SHA512 75c6db410eed91f882e6d1171228dc548aa5c836d189566c1efc7dba2e16f0886a9d68d05611549782065f0a57c0d53f7f527cc78044151c05420fd4129bc785
- TLSH T1ECC022DA821008D03686131452C4E75AE0FC61EA608358491D0A800120528F2B802440
- MD5 SHA1 SHA512 TLSH
CVE-2020-1350-master/windows-exploit.ps1
- SHA256 0b719028aecc449a9efa9ec9d67f7faf3ffc15404c362f71c659d698be2c9956
- MD5 4cc9cea92a56386fd7852ed98012f18c
- SHA1 fa371891048ec8dbba04eedf59ace6ea4f5817e7
- SHA512 b4687ca38de00b91d0484182941495408634b3cc83ffba41ad9b5bc239cef22cbf64fe68a271e900128dcb1719d2373a4215e2fab7a7334da98c14402e9b0159
- SSDEEP 768:c/n/Lc3vSysztkmnHQTtCBzgvQCdBGeNOWnTzXz1qq0mi0rH:crsSfztlncJYGGeMWTzXz1B00D
- TLSH T175F2E17DE262E13C1773D07B4439216B25A8046E274AE784B0CD9AE9C7067E5F78177C
- MD5 SHA1 SHA512 SSDEEP TLSH