csm[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

csm.exe
Size

1.2MB
MD5

a79b9d6bb87cf7066173762a05fee516
SHA1

d3053ffdc6604e2a72a00f07164c20f75b8db119
SHA256

c783dd02d48072fca7f73c231d57b7bf46b2d6deaf2a73ccfe27a8a052717ce9
SHA512

39d4857492331b162f5850442ee3eb693a45bd8506b8c998a05ba7afe53ffa052f59d7ac564557a1efa90c87d7e37232d64032d5d2895df539c75c0f302b40bc
SSDEEP

24576:X/5I6vellgafUYN793KrgtVs5XFDO5W4r29Aq/rAUUJeVI1RlNN7IabXrN+ckTHn:v5ylxfUYN793KrgtVs5XFDO5W4r29Aqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
csm.exe

Files

csm.exe
.exe windows x64

85eee5eec33c5608f851fe2c7c2f6c32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

libgcc_s_seh-1

_Unwind_Resume

glfw3

glfwCreateWindow
glfwGetCursorPos
glfwGetKey
glfwGetTime
glfwGetWindowSize
glfwInit
glfwMakeContextCurrent
glfwPollEvents
glfwSetFramebufferSizeCallback
glfwSetMouseButtonCallback
glfwSetWindowShouldClose
glfwSetWindowTitle
glfwSwapBuffers
glfwTerminate
glfwWindowHint
glfwWindowShouldClose

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
__C_specific_handler

msvcrt

__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
_amsg_exit
_assert
_cexit
_commode
_errno
_fmode
_initterm
_onexit
_stat64
abort
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memmove
memset
signal
strlen
strncmp
tan
vfprintf

opengl32

wglGetProcAddress

libstdc++-6

_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4sizeEv
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE5c_strEv
_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7_M_dataEv
_ZNKSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEE3strEv
_ZNKSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEE3strEv
_ZNKSt9basic_iosIcSt11char_traitsIcEE3eofEv
_ZNKSt9basic_iosIcSt11char_traitsIcEE4goodEv
_ZNKSt9basic_iosIcSt11char_traitsIcEEntEv
_ZNSaIcEC1Ev
_ZNSaIcEC2ERKS_
_ZNSaIcED1Ev
_ZNSaIcED2Ev
_ZNSi3getEv
_ZNSolsEPFRSoS_E
_ZNSolsEd
_ZNSt14basic_ifstreamIcSt11char_traitsIcEE5closeEv
_ZNSt14basic_ifstreamIcSt11char_traitsIcEEC1EPKcSt13_Ios_Openmode
_ZNSt14basic_ifstreamIcSt11char_traitsIcEED1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE10_M_disposeEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE11_M_capacityEy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE12_M_constructEyc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE13_M_local_dataEv
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE13_M_set_lengthEy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE13_S_copy_charsEPcPKcS7_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6appendEPKc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE6insertEyPKc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7_M_dataEPc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE9_M_createERyy
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1EOS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1ERKS4_
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEED1Ev
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEaSEPKc
_ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEixEy
_ZNSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEEC1Ev
_ZNSt7__cxx1118basic_stringstreamIcSt11char_traitsIcESaIcEED1Ev
_ZNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEEC1Ev
_ZNSt7__cxx1119basic_ostringstreamIcSt11char_traitsIcESaIcEED1Ev
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZSt17__throw_bad_allocv
_ZSt19__throw_logic_errorPKc
_ZSt20__throw_length_errorPKc
_ZSt28__throw_bad_array_new_lengthv
_ZSt4cout
_ZSt4endlIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_
_ZSt9terminatev
_ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc
_ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_c
_ZdaPv
_ZdlPv
_Znay
_Znwy
__cxa_begin_catch
__cxa_end_catch
__cxa_guard_abort
__cxa_guard_acquire
__cxa_guard_release
__cxa_rethrow
__gxx_personality_seh0

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 331KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 298KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 512B - Virtual size: 167B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/106
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/122
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/138
Size: 1024B - Virtual size: 644B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

85eee5eec33c5608f851fe2c7c2f6c32

Headers

DLL Characteristics

File Characteristics

Imports

libgcc_s_seh-1

glfw3

kernel32

msvcrt

opengl32

libstdc++-6

Sections

.text Size: 104KB - Virtual size: 103KB

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 18KB - Virtual size: 18KB

.pdata Size: 8KB - Virtual size: 8KB

.xdata Size: 7KB - Virtual size: 6KB

.bss Size: - Virtual size: 6KB

.idata Size: 6KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 96B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 244B

/4 Size: 2KB - Virtual size: 1KB

/19 Size: 331KB - Virtual size: 331KB

/31 Size: 20KB - Virtual size: 20KB

/45 Size: 82KB - Virtual size: 82KB

/57 Size: 4KB - Virtual size: 3KB

/70 Size: 298KB - Virtual size: 297KB

/81 Size: 512B - Virtual size: 167B

/92 Size: 15KB - Virtual size: 14KB

/106 Size: 8KB - Virtual size: 7KB

/122 Size: 8KB - Virtual size: 7KB

/138 Size: 1024B - Virtual size: 644B

.text
Size: 104KB - Virtual size: 103KB

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 18KB - Virtual size: 18KB

.pdata
Size: 8KB - Virtual size: 8KB

.xdata
Size: 7KB - Virtual size: 6KB

.bss
Size: - Virtual size: 6KB

.idata
Size: 6KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 96B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 244B

/4
Size: 2KB - Virtual size: 1KB

/19
Size: 331KB - Virtual size: 331KB

/31
Size: 20KB - Virtual size: 20KB

/45
Size: 82KB - Virtual size: 82KB

/57
Size: 4KB - Virtual size: 3KB

/70
Size: 298KB - Virtual size: 297KB

/81
Size: 512B - Virtual size: 167B

/92
Size: 15KB - Virtual size: 14KB

/106
Size: 8KB - Virtual size: 7KB

/122
Size: 8KB - Virtual size: 7KB

/138
Size: 1024B - Virtual size: 644B