Static task
static1
Behavioral task
behavioral1
Sample
infinityApex.exe
Resource
win10-20231020-en
Behavioral task
behavioral2
Sample
infinityApex.exe
Resource
win10v2004-20231023-en
General
-
Target
infinityApex.exe
-
Size
949KB
-
MD5
5bfa7a4978e7168cc310d2bb1cab245e
-
SHA1
ebee0b90524e792b4d57aa3f4c2abc2d59b3b7d1
-
SHA256
9681b83e015678c001b7145bd7ff43dea8cdf00318acdea8b8535a466be4321a
-
SHA512
bcd70527af44cd1c5a502e19aa0c6a1a1f260ac202fae809eb71e8d71a419888360ed956dad0da4cb4e2aec67192c12f81ae5d52e0c5dbd3d7899dddb9de6788
-
SSDEEP
24576:NGJEdnFIiQUHtcLh4bXxuEkeh0lhSMXl4lJcf0:N+EdFIiBoE+LYz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource infinityApex.exe
Files
-
infinityApex.exe.exe windows:6 windows x64
14cff0118b0505560a99733741266b70
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
xinput1_3
ord2
opencv_world452
??1Net@dnn4_v20210301@dnn@cv@@QEAA@XZ
?getLayerNames@Net@dnn4_v20210301@dnn@cv@@QEBA?AV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@XZ
?forward@Net@dnn4_v20210301@dnn@cv@@QEAAXAEBV_OutputArray@4@AEBV?$vector@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$allocator@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@2@@std@@@Z
?minMaxLoc@cv@@YAXAEBV_InputArray@1@PEAN1PEAV?$Point_@H@1@20@Z
?setPreferableTarget@Net@dnn4_v20210301@dnn@cv@@QEAAXH@Z
?setInput@Net@dnn4_v20210301@dnn@cv@@QEAAXAEBV_InputArray@4@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@NAEBV?$Scalar_@N@4@@Z
??0Net@dnn4_v20210301@dnn@cv@@QEAA@XZ
?noArray@cv@@YAAEBV_InputOutputArray@1@XZ
??0Mat@cv@@QEAA@AEBV01@AEBVRange@1@1@Z
??0Mat@cv@@QEAA@HHHPEAX_K@Z
??0Mat@cv@@QEAA@AEBV01@@Z
??0Mat@cv@@QEAA@XZ
??1Mat@cv@@QEAA@XZ
??4Mat@cv@@QEAAAEAV01@$$QEAV01@@Z
?NMSBoxes@dnn4_v20210301@dnn@cv@@YAXAEBV?$vector@V?$Rect_@H@cv@@V?$allocator@V?$Rect_@H@cv@@@std@@@std@@AEBV?$vector@MV?$allocator@M@std@@@5@MMAEAV?$vector@HV?$allocator@H@std@@@5@MH@Z
?readNetFromDarknet@dnn4_v20210301@dnn@cv@@YA?AVNet@123@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?blobFromImage@dnn4_v20210301@dnn@cv@@YAXAEBV_InputArray@3@AEBV_OutputArray@3@NAEBV?$Size_@H@3@AEBV?$Scalar_@N@3@_N4H@Z
?setUseOpenCL@ocl@cv@@YAX_N@Z
?useOpenCL@ocl@cv@@YA_NXZ
?haveOpenCL@ocl@cv@@YA_NXZ
?getUnconnectedOutLayers@Net@dnn4_v20210301@dnn@cv@@QEBA?AV?$vector@HV?$allocator@H@std@@@std@@XZ
?getCudaEnabledDeviceCount@cuda@cv@@YAHXZ
?setPreferableBackend@Net@dnn4_v20210301@dnn@cv@@QEAAXH@Z
kernel32
DeleteCriticalSection
GetModuleHandleW
SetLastError
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
SleepEx
GetSystemDirectoryA
VerifyVersionInfoA
GetTickCount
WaitForSingleObjectEx
GetEnvironmentVariableA
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
CreateFileA
GetFileSizeEx
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
InitializeCriticalSectionEx
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetConsoleWindow
GetCurrentProcessId
CreateThread
CloseHandle
GetLastError
K32GetModuleFileNameExA
CreateMutexA
GetStdHandle
RtlLookupFunctionEntry
GetCurrentProcess
SetConsoleTextAttribute
Sleep
QueryPerformanceCounter
FreeLibrary
VerSetConditionMask
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
MultiByteToWideChar
OutputDebugStringW
MoveFileExA
user32
GetClientRect
SetCursor
SetCapture
GetForegroundWindow
TrackMouseEvent
IsChild
ClientToScreen
GetCapture
ScreenToClient
LoadCursorA
GetAsyncKeyState
GetSystemMetrics
SetForegroundWindow
UpdateWindow
ReleaseCapture
SetCursorPos
GetCursorPos
UnregisterClassA
PeekMessageA
LoadIconA
GetWindowDC
TranslateMessage
SetFocus
CreateWindowExA
DefWindowProcA
MessageBoxA
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
SetWindowTextA
GetClipboardData
PostQuitMessage
GetDesktopWindow
FindWindowA
SendInput
RegisterClassExA
DispatchMessageA
GetWindowRect
DestroyWindow
SetWindowPos
GetClassNameA
ShowWindow
SetWindowLongA
GetWindowTextA
GetWindow
gdi32
CreateCompatibleBitmap
DeleteDC
GetDIBits
CreateCompatibleDC
SelectObject
DeleteObject
BitBlt
advapi32
AllocateAndInitializeSid
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
FreeSid
CheckTokenMembership
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
dwmapi
DwmExtendFrameIntoClientArea
msvcp140
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
_Xtime_get_ticks
_Query_perf_counter
_Thrd_sleep
?_Xlength_error@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Query_perf_frequency
?good@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
d3d9
Direct3DCreate9Ex
normaliz
IdnToAscii
wldap32
ord46
ord45
ord217
ord301
ord60
ord211
ord50
ord41
ord22
ord26
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord143
crypt32
CryptQueryObject
CertCreateCertificateChainEngine
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
PFXImportCertStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
CryptDecodeObjectEx
ws2_32
WSAIoctl
ntohl
gethostname
sendto
recvfrom
freeaddrinfo
getaddrinfo
select
__WSAFDIsSet
ioctlsocket
listen
htonl
accept
WSACleanup
WSAStartup
htons
WSASetLastError
socket
setsockopt
ntohs
closesocket
getsockopt
getsockname
getpeername
connect
bind
WSAGetLastError
send
recv
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memcpy
memcmp
memchr
_CxxThrowException
strrchr
__C_specific_handler
__std_exception_copy
__std_exception_destroy
strchr
strstr
__std_terminate
__current_exception
__current_exception_context
memset
api-ms-win-crt-stdio-l1-1-0
fseek
ftell
fclose
fgets
_set_fmode
fflush
fwrite
_wfopen
_open
__stdio_common_vsprintf_s
__stdio_common_vsprintf
_close
__p__commode
_lseeki64
fread
fputc
_write
_read
fopen
fputs
__stdio_common_vsscanf
feof
__acrt_iob_func
api-ms-win-crt-string-l1-1-0
strcmp
tolower
strcspn
strspn
strcpy_s
strncpy
strpbrk
isupper
strncmp
_strdup
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-heap-l1-1-0
calloc
free
malloc
_callnewh
_set_new_mode
realloc
api-ms-win-crt-convert-l1-1-0
strtoll
strtoul
strtol
atoi
atof
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64
api-ms-win-crt-runtime-l1-1-0
exit
_getpid
_register_thread_local_exe_atexit_callback
system
_c_exit
terminate
strerror
__p___argv
__p___argc
__sys_nerr
_errno
_initialize_narrow_environment
_configure_narrow_argv
_exit
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_initialize_onexit_table
_register_onexit_function
_beginthreadex
api-ms-win-crt-math-l1-1-0
fmodf
__setusermatherr
acosf
sin
api-ms-win-crt-filesystem-l1-1-0
_stat64i32
_access
_fstat64
_unlink
_stat64
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 601KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 309KB - Virtual size: 308KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 632B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ