cb59fbd8bee89320a0179ec05e5f402ba3ff0d143e64547eeb46fa99593e127f

Sharing

Copy URL Twitter E-mail

General

Target

cb59fbd8bee89320a0179ec05e5f402ba3ff0d143e64547eeb46fa99593e127f
Size

80KB
MD5

2fd1b3a15dd758cbce386e45efe4d468
SHA1

6c8472108ce158c518be8d20a6e2d06292cc5599
SHA256

cb59fbd8bee89320a0179ec05e5f402ba3ff0d143e64547eeb46fa99593e127f
SHA512

b6b5bea15ecb64ab56fc55808c32b5fe09345ca21a8e3b2ce8b675337a264d0349564179349dd8a35ee947de7b5fee873a73b4540f03d36542726b46f5df6bf8
SSDEEP

768:ONs4MIftICDiA/tiqDnlrfDyO9U1gwCxgAT7:cjM+gQl741PGgc7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cb59fbd8bee89320a0179ec05e5f402ba3ff0d143e64547eeb46fa99593e127f

Files

cb59fbd8bee89320a0179ec05e5f402ba3ff0d143e64547eeb46fa99593e127f
.exe windows:6 windows x64

5ed4e3b68583a8d0568eaf1b0594a98e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

miktex230900-app

??0Application@App@MiKTeX@@QEAA@XZ
?Finalize2@Application@App@MiKTeX@@UEAAXH@Z
?Sorry@Application@App@MiKTeX@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVMiKTeXException@Core@3@@Z
??1Application@App@MiKTeX@@UEAA@XZ
?Sorry@Application@App@MiKTeX@@QEAAXAEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AEBVexception@5@@Z
?Init@Application@App@MiKTeX@@UEAAXAEAV?$vector@PEADV?$allocator@PEAD@std@@@std@@@Z

miktex230900-fontconfig

FcCacheDir
FcCacheCopySet
FcCacheSubdir
FcConfigDestroy
FcConfigSetCurrent
FcConfigGetFontDirs
FcFileIsDir
FcStrListDone
FcStrListNext
FcStrListCreate
FcStrSetDestroy
FcStrSetAddFilename
FcStrSetAdd
FcStrSetCreate
FcStrFree
FcInitLoadConfig
FcFontSetDestroy
FcDirCacheUnload
FcDirCacheLoad
FcFini
FcPatternFormat
FcDirCacheLoadFile
FcCacheNumSubdir

miktex230900-getopt

getopt_long
MIKTEX_GETOPT_optind

miktex230900-core

??0ConsoleCodePageSwitcher@Core@MiKTeX@@QEAA@XZ
??1ConsoleCodePageSwitcher@Core@MiKTeX@@UEAA@XZ
?Save@MiKTeXException@Core@MiKTeX@@QEBA_NXZ

miktex230900-utf8wrap

miktex_utf8_putc

miktex230900-util

?WideCharToUTF8@StringUtil@Util@MiKTeX@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PEB_W@Z

kernel32

InitializeSListHead
VerSetConditionMask
VerifyVersionInfoW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent

msvcp140

?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?good@ios_base@std@@QEBA_NXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?width@ios_base@std@@QEBA_JXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?width@ios_base@std@@QEAA_J_J@Z
?flags@ios_base@std@@QEBAHXZ

vcruntime140

__std_type_info_destroy_list
__current_exception_context
__current_exception
__C_specific_handler
memset
memmove
__std_exception_destroy
__std_exception_copy
__std_terminate
_CxxThrowException
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_exit
_configure_wide_argv
__p___argc
__p___wargv
_initterm
_get_initial_wide_environment
_set_app_type
_seh_filter_exe
_cexit
_initialize_narrow_environment
terminate
_crt_at_quick_exit
_invalid_parameter_noinfo_noreturn
perror
_register_thread_local_exe_atexit_callback
_crt_atexit
_initialize_wide_environment
_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_register_onexit_function
_c_exit
_errno
exit
_initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
_set_fmode
__stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

strncmp

api-ms-win-crt-locale-l1-1-0

setlocale
_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_callnewh
_set_new_mode
malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 373B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 497B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5ed4e3b68583a8d0568eaf1b0594a98e

Headers

DLL Characteristics

File Characteristics

Imports

miktex230900-app

miktex230900-fontconfig

miktex230900-getopt

miktex230900-core

miktex230900-utf8wrap

miktex230900-util

kernel32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 1KB - Virtual size: 3KB

.pdata Size: 2KB - Virtual size: 2KB

.idata Size: 10KB - Virtual size: 9KB

.00cfg Size: 512B - Virtual size: 373B

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 512B - Virtual size: 497B

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 1KB - Virtual size: 3KB

.pdata
Size: 2KB - Virtual size: 2KB

.idata
Size: 10KB - Virtual size: 9KB

.00cfg
Size: 512B - Virtual size: 373B

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 512B - Virtual size: 497B