PeiBackdoor.c
C
Verdict: BENIGN
Local reference
Suspicious dependency
Inferred
| 29 |
#pragma section(".conf", read, write) |
Quoted hidden-dotfile path literal |
| 54 |
// backdoor image base (might be set by infector) |
Code explicitly mentions malware/backdoor |
| 55 |
0 |
|
| 56 |
}; |
|
| 123 |
{ |
|
| 124 |
// get backdoor image base address |
Code explicitly mentions malware/backdoor |
| 125 |
VOID *Base = ImageBaseByAddress(get_addr()); |
|
| 160 |
// initialize BACKDOOR_INFO structure |
Code explicitly mentions malware/backdoor |
| 161 |
BackdoorInfoInitialize(); |
|
Objectives
| 29 |
#pragma section(".conf", read, write) |
|
| 54 |
// backdoor image base (might be set by infector) |
|
| 55 |
0 |
|
| 56 |
}; |
|
| 123 |
{ |
|
| 124 |
// get backdoor image base address |
|
| 125 |
VOID *Base = ImageBaseByAddress(get_addr()); |
|
| 160 |
// initialize BACKDOOR_INFO structure |
|
| 161 |
BackdoorInfoInitialize(); |
|
Identity
| SHA-256 |
24eccd145507fbf70e982d14b1922cb0183557de2d26bbcf18a6b05bcde247a2 |
| Filename |
PeiBackdoor.c |
Timeline
| First seen |
4 Jun 2026 23:17 UTC |
| First analyzed |
9 Jun 2026 14:06 UTC |
| Last analyzed |
21 Jun 2026 07:05 UTC |
| Last updated |
21 Jun 2026 07:05 UTC |
Labeling
| Label |
bad |
| Label source |
harvest |
| Traits version |
1f35f |