dw4qdkjbqwijhdhbwqjid[.]iso[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
dw4qdkjbqwijhdhbwqjid.iso.exe
Size 2.9MB
Sample230712-emccmabg89
SHA256 50810e4696dd075ca23349e3e1c3a87fc7b46ab89f4b1eb093a5cfb74f84cc51
MD5 f6d0b9617405f35bb846d671edda75d3
SHA1 19307cd55c54e8d4db3666fd11d69f2fe27942c0
SHA512 ebb3307c6664360f0d859735f3c6c519b08f10a18bb96a2829a09d9c5febb490b3d6a7f77315de5280fec3acd9b923b48386a17adb30a8b70c4b19b8ffcbc201
SSDEEP 49152:jEFD9UfWifI29mfKQnMg2XgEl7MV/yTm:7U9yTm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dw4qdkjbqwijhdhbwqjid.iso.exe

File Explorer

dw4qdkjbqwijhdhbwqjid.iso.exe

.dll 2.9MB

dw4qdkjbqwijhdhbwqjid.iso.exe

IMPHASH d8cf501f2ead6a968abf3df1e5f5d366
SHA256 50810e4696dd075ca23349e3e1c3a87fc7b46ab89f4b1eb093a5cfb74f84cc51
MD5 f6d0b9617405f35bb846d671edda75d3
SHA1 19307cd55c54e8d4db3666fd11d69f2fe27942c0
SHA512 ebb3307c6664360f0d859735f3c6c519b08f10a18bb96a2829a09d9c5febb490b3d6a7f77315de5280fec3acd9b923b48386a17adb30a8b70c4b19b8ffcbc201
SSDEEP 49152:jEFD9UfWifI29mfKQnMg2XgEl7MV/yTm:7U9yTm
MD5 SHA1 SHA512 SSDEEP

windows x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2192300

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

MapViewOfFile GetLastError CreateFileMappingA GetCurrentProcessId GetVersionExA CloseHandle UnmapViewOfFile LoadLibraryA GetProcAddress GetModuleHandleA DecodePointer EncodePointer HeapAlloc GetCurrentThreadId FlsSetValue GetCommandLineA HeapFree UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext TerminateProcess GetCurrentProcess WriteFile GetStdHandle GetModuleFileNameW GetLocaleInfoW GetModuleHandleW ExitProcess HeapSetInformation GetVersion HeapCreate HeapDestroy Sleep HeapSize RtlUnwindEx RaiseException RtlPcToFileHeader FlsGetValue FlsFree SetLastError GetCurrentThread FlsAlloc SetHandleCount InitializeCriticalSectionAndSpinCount GetFileType GetStartupInfoW DeleteCriticalSection GetModuleFileNameA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection FatalAppExitA SetFilePointer GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage SetConsoleCtrlHandler LoadLibraryW FreeLibrary HeapReAlloc SetStdHandle WriteConsoleW MultiByteToWideChar LCMapStringW GetStringTypeW FlushFileBuffers CreateFileW GetUserDefaultLCID GetLocaleInfoA EnumSystemLocalesA IsValidLocale LocalAlloc LocalFree

??0NbBroadPhaseAddsProperty@physx@@QEAA@XZ ??0NbBroadPhaseRemovesProperty@physx@@QEAA@XZ ??0NbCCDPairsProperty@physx@@QEAA@XZ ??0NbDiscreteContactPairsProperty@physx@@QEAA@XZ ??0NbModifiedContactPairsProperty@physx@@QEAA@XZ ??0NbShapesProperty@physx@@QEAA@XZ ??0NbTriggerPairsProperty@physx@@QEAA@XZ ??0ProjectionPlaneProperty@physx@@QEAA@XZ ??0PxActorGeneratedInfo@physx@@QEAA@XZ ??0PxActorGeneratedValues@physx@@QEAA@PEBVPxActor@1@@Z ??0PxAggregateGeneratedInfo@physx@@QEAA@XZ ??0PxAggregateGeneratedValues@physx@@QEAA@PEBVPxAggregate@1@@Z ??0PxArticulationGeneratedInfo@physx@@QEAA@XZ ??0PxArticulationGeneratedValues@physx@@QEAA@PEBVPxArticulation@1@@Z ??0PxArticulationJointGeneratedInfo@physx@@QEAA@XZ ??0PxArticulationJointGeneratedValues@physx@@QEAA@PEBVPxArticulationJoint@1@@Z ??0PxArticulationLinkGeneratedInfo@physx@@QEAA@XZ ??0PxArticulationLinkGeneratedValues@physx@@QEAA@PEBVPxArticulationLink@1@@Z ??0PxBoxGeometryGeneratedInfo@physx@@QEAA@XZ ??0PxBoxGeometryGeneratedValues@physx@@QEAA@PEBVPxBoxGeometry@1@@Z ??0PxCapsuleGeometryGeneratedInfo@physx@@QEAA@XZ ??0PxCapsuleGeometryGeneratedValues@physx@@QEAA@PEBVPxCapsuleGeometry@1@@Z ??0PxClothFabricGeneratedInfo@physx@@QEAA@XZ ??0PxClothFabricGeneratedValues@physx@@QEAA@PEBVPxClothFabric@1@@Z ??0PxClothFabricPhaseGeneratedInfo@physx@@QEAA@XZ ??0PxClothFabricPhaseGeneratedValues@physx@@QEAA@PEBUPxClothFabricPhase@1@@Z ??0PxClothGeneratedInfo@physx@@QEAA@XZ ??0PxClothGeneratedValues@physx@@QEAA@PEBVPxCloth@1@@Z ??0PxClothMotionConstraintConfigGeneratedInfo@physx@@QEAA@XZ ??0PxClothMotionConstraintConfigGeneratedValues@physx@@QEAA@PEBUPxClothMotionConstraintConfig@1@@Z ??0PxClothParticleDataGeneratedInfo@physx@@QEAA@XZ ??0PxClothParticleDataGeneratedValues@physx@@QEAA@PEBVPxClothParticleData@1@@Z ??0PxClothParticleGeneratedInfo@physx@@QEAA@XZ ??0PxClothParticleGeneratedValues@physx@@QEAA@PEBUPxClothParticle@1@@Z ??0PxClothStretchConfigGeneratedInfo@physx@@QEAA@XZ ??0PxClothStretchConfigGeneratedValues@physx@@QEAA@PEBUPxClothStretchConfig@1@@Z ??0PxClothTetherConfigGeneratedInfo@physx@@QEAA@XZ ??0PxClothTetherConfigGeneratedValues@physx@@QEAA@PEBUPxClothTetherConfig@1@@Z ??0PxConstraintGeneratedInfo@physx@@QEAA@XZ ??0PxConstraintGeneratedValues@physx@@QEAA@PEBVPxConstraint@1@@Z ??0PxConvexMeshGeometryGeneratedInfo@physx@@QEAA@XZ ??0PxConvexMeshGeometryGeneratedValues@physx@@QEAA@PEBVPxConvexMeshGeometry@1@@Z ??0PxGeometryGeneratedInfo@physx@@QEAA@XZ ??0PxGeometryGeneratedValues@physx@@QEAA@PEBVPxGeometry@1@@Z ??0PxHeightFieldDescGeneratedInfo@physx@@QEAA@XZ ??0PxHeightFieldDescGeneratedValues@physx@@QEAA@PEBVPxHeightFieldDesc@1@@Z ??0PxHeightFieldGeometryGeneratedInfo@physx@@QEAA@XZ ??0PxHeightFieldGeometryGeneratedValues@physx@@QEAA@PEBVPxHeightFieldGeometry@1@@Z ??0PxLockedDataGeneratedInfo@physx@@QEAA@XZ ??0PxLockedDataGeneratedValues@physx@@QEAA@PEBVPxLockedData@1@@Z ??0PxMaterialGeneratedInfo@physx@@QEAA@XZ ??0PxMaterialGeneratedValues@physx@@QEAA@PEBVPxMaterial@1@@Z ??0PxMeshScaleGeneratedInfo@physx@@QEAA@XZ ??0PxMeshScaleGeneratedValues@physx@@QEAA@PEBVPxMeshScale@1@@Z ??0PxParticleBaseGeneratedInfo@physx@@QEAA@XZ ??0PxParticleBaseGeneratedValues@physx@@QEAA@PEBVPxParticleBase@1@@Z ??0PxParticleFluidGeneratedInfo@physx@@QEAA@XZ ??0PxParticleFluidGeneratedValues@physx@@QEAA@PEBVPxParticleFluid@1@@Z ??0PxParticleReadDataGeneratedInfo@physx@@QEAA@XZ ??0PxParticleReadDataGeneratedValues@physx@@QEAA@PEBVPxParticleReadData@1@@Z ??0PxParticleSystemGeneratedInfo@physx@@QEAA@XZ ??0PxParticleSystemGeneratedValues@physx@@QEAA@PEBVPxParticleSystem@1@@Z ??0PxPhysicsGeneratedInfo@physx@@QEAA@XZ ??0PxPhysicsGeneratedValues@physx@@QEAA@PEBVPxPhysics@1@@Z ??0PxPlaneGeometryGeneratedInfo@physx@@QEAA@XZ ??0PxPlaneGeometryGeneratedValues@physx@@QEAA@PEBVPxPlaneGeometry@1@@Z ??0PxRigidActorGeneratedInfo@physx@@QEAA@XZ ??0PxRigidActorGeneratedValues@physx@@QEAA@PEBVPxRigidActor@1@@Z ??0PxRigidBodyGeneratedInfo@physx@@QEAA@XZ ??0PxRigidBodyGeneratedValues@physx@@QEAA@PEBVPxRigidBody@1@@Z ??0PxRigidDynamicGeneratedInfo@physx@@QEAA@XZ ??0PxRigidDynamicGeneratedValues@physx@@QEAA@PEBVPxRigidDynamic@1@@Z ??0PxRigidStaticGeneratedInfo@physx@@QEAA@XZ ??0PxRigidStaticGeneratedValues@physx@@QEAA@PEBVPxRigidStatic@1@@Z ??0PxSceneDescGeneratedInfo@physx@@QEAA@XZ ??0PxSceneDescGeneratedValues@physx@@QEAA@PEBVPxSceneDesc@1@@Z ??0PxSceneGeneratedInfo@physx@@QEAA@XZ ??0PxSceneGeneratedValues@physx@@QEAA@PEBVPxScene@1@@Z ??0PxSceneLimitsGeneratedInfo@physx@@QEAA@XZ ??0PxSceneLimitsGeneratedValues@physx@@QEAA@PEBVPxSceneLimits@1@@Z ??0PxShapeGeneratedInfo@physx@@QEAA@XZ ??0PxShapeGeneratedValues@physx@@QEAA@PEBVPxShape@1@@Z ??0PxSimulationStatisticsGeneratedInfo@physx@@QEAA@XZ ??0PxSimulationStatisticsGeneratedValues@physx@@QEAA@PEBVPxSimulationStatistics@1@@Z ??0PxSphereGeometryGeneratedInfo@physx@@QEAA@XZ ??0PxSphereGeometryGeneratedValues@physx@@QEAA@PEBVPxSphereGeometry@1@@Z ??0PxTolerancesScaleGeneratedInfo@physx@@QEAA@XZ ??0PxTolerancesScaleGeneratedValues@physx@@QEAA@PEBVPxTolerancesScale@1@@Z ??0PxTriangleMeshGeometryGeneratedInfo@physx@@QEAA@XZ ??0PxTriangleMeshGeometryGeneratedValues@physx@@QEAA@PEBVPxTriangleMeshGeometry@1@@Z ??0RestvaluesProperty@physx@@QEAA@XZ ??0SimulationStatisticsProperty@physx@@QEAA@XZ ?PxCreateSpatialIndex@physx@@YAPEAVPxSpatialIndex@1@XZ ?createConvexMeshMirror@PxParticleGpu@physx@@SA_NAEBVPxConvexMesh@2@AEAVPxCudaContextManager@2@@Z ?createHeightFieldMirror@PxParticleGpu@physx@@SA_NAEBVPxHeightField@2@AEAVPxCudaContextManager@2@@Z ?createLink@PxArticulationLinkCollectionPropHelper@physx@@QEBAPEAVPxArticulationLink@2@PEAVPxArticulation@2@PEAV32@AEBVPxTransform@2@@Z ?createShape@PxRigidActorShapeCollectionHelper@physx@@QEBAPEAVPxShape@2@PEAVPxRigidActor@2@AEBVPxGeometry@2@AEAVPxMaterial@2@V?$PxFlags@W4Enum@PxShapeFlag@physx@@E@2@@Z ?createShape@PxRigidActorShapeCollectionHelper@physx@@QEBAPEAVPxShape@2@PEAVPxRigidActor@2@AEBVPxGeometry@2@PEBQEAVPxMaterial@2@GV?$PxFlags@W4Enum@PxShapeFlag@physx@@E@2@@Z ?createTriangleMeshMirror@PxParticleGpu@physx@@SA_NAEBVPxTriangleMesh@2@AEAVPxCudaContextManager@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxBoxGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxCapsuleGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxConvexMeshGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxHeightFieldGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxPlaneGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxSphereGeometry@2@@Z ?getGeometry@PxShapeGeometryPropertyHelper@physx@@QEBA_NPEBVPxShape@2@AEAVPxTriangleMeshGeometry@2@@Z ?getGeometryType@PxShapeGeometryPropertyHelper@physx@@QEBA?AW4Enum@PxGeometryType@2@PEBVPxShape@2@@Z ?getReadWriteCudaBuffers@PxParticleDeviceExclusive@physx@@SAXAEAVPxParticleBase@2@AEAUPxCudaReadWriteParticleBuffers@2@@Z ?registerPhysXIndicatorGpuClient@PxPhysXIndicatorDeviceExclusive@physx@@SAXAEAVPxPhysics@2@@Z ?releaseConvexMeshMirror@PxParticleGpu@physx@@SAXAEBVPxConvexMesh@2@PEAVPxCudaContextManager@2@@Z ?releaseHeightFieldMirror@PxParticleGpu@physx@@SAXAEBVPxHeightField@2@PEAVPxCudaContextManager@2@@Z ?releaseTriangleMeshMirror@PxParticleGpu@physx@@SAXAEBVPxTriangleMesh@2@PEAVPxCudaContextManager@2@@Z ?setExplicitCudaFlushCountHint@PxParticleGpu@physx@@SAXAEBVPxScene@2@I@Z ?setFlags@PxParticleDeviceExclusive@physx@@SAXAEAVPxParticleBase@2@V?$PxFlags@W4Enum@PxParticleDeviceExclusiveFlag@physx@@I@2@@Z ?setMaterials@PxShapeMaterialsPropertyHelper@physx@@QEBAXPEAVPxShape@2@PEBQEAVPxMaterial@2@G@Z ?setTriangleMeshCacheSizeHint@PxParticleGpu@physx@@SA_NAEBVPxScene@2@I@Z ?setValidParticleRange@PxParticleDeviceExclusive@physx@@SAXAEAVPxParticleBase@2@I@Z ?unregisterPhysXIndicatorGpuClient@PxPhysXIndicatorDeviceExclusive@physx@@SAXAEAVPxPhysics@2@@Z PxAddCollectionToPhysics PxCreateBasePhysics PxGetPhysics PxGetPhysicsBinaryMetaData PxGetValue PxRegisterArticulations PxRegisterCloth PxRegisterHeightFields PxRegisterParticles PxRegisterPhysicsSerializers PxRegisterUnifiedHeightFields PxSetPhysXDelayLoadHook PxUnregisterPhysicsSerializers

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

337KB

Virtual Size

336KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

38KB

Virtual Size

53KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

138KB

Virtual Size

138KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

text

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE

Name

data

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

880B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ