numbat-v1[.]10[.]1-x86_64-pc-windows-msvc[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

numbat-v1.10.1-x86_64-pc-windows-msvc.zip
Size

2.2MB
MD5

ac70f2ad4b8f4303ee35adebb815039c
SHA1

a0a1e0dda68bf4e2c81d07407bd54efe489c510f
SHA256

1b4cbd4e5fdee9b16091fc1f77de9e5ed423a77d114158eb5adbb60e751c49b6
SHA512

1460275ab7558fac0f46fb0dd63967d9142ddead46eb743e92721707b2e483eb0d812e29ae02b634482b9cb3c5be2c05404527ad31c91a7fa312889543c9154a
SSDEEP

49152:SRI7DHJIvmFfAcF0ZQdlv+G2qbPe/76oB6lBBsQafkWebQq6ueZ1Rvd7:1DHJIvmicWwlv0YPe/7FeB2tfk3U8evv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/numbat-v1.10.1-x86_64-pc-windows-msvc/numbat.exe

Files

numbat-v1.10.1-x86_64-pc-windows-msvc.zip
.zip
numbat-v1.10.1-x86_64-pc-windows-msvc/LICENSE-APACHE
numbat-v1.10.1-x86_64-pc-windows-msvc/LICENSE-MIT
numbat-v1.10.1-x86_64-pc-windows-msvc/README.md
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat-128x128.png
.png
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat-16x16.png
.png
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat-22x22.png
.png
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat-24x24.png
.png
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat-256x256.png
.png
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat-32x32.png
.png
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat-48x48.png
.png
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat-512x512.png
.png
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat-64x64.png
.png
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat.desktop
numbat-v1.10.1-x86_64-pc-windows-msvc/assets/numbat.svg
.xml
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/all.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/core/dimensions.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/core/error.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/core/functions.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/core/quantities.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/core/scalar.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/core/strings.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/datetime/functions.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/datetime/human.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/extra/astronomy.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/extra/cooking.nbt
.js
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/math/constants.nbt
.js
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/math/functions.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/math/trigonometry_extra.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/physics/constants.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/physics/temperature_conversion.nbt
.js
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/prelude.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/astronomical.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/bit.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/cgs.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/currencies.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/currency.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/fff.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/hartree.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/humorous.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/imperial.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/misc.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/nautical.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/partsperx.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/placeholder.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/planck.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/si.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/stoney.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/time.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/modules/units/us_customary.nbt
numbat-v1.10.1-x86_64-pc-windows-msvc/numbat.exe
.exe windows:6 windows x64 arch:x64

cfc371a271b8d2592f3863484f521046

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CloseHandle
SwitchToThread
GetConsoleScreenBufferInfo
GetLastError
SetConsoleCursorPosition
WriteConsoleW
GetConsoleCursorInfo
SetConsoleCursorInfo
WaitForMultipleObjects
GetNumberOfConsoleInputEvents
ResetEvent
QueryPerformanceCounter
GetStdHandle
GetConsoleMode
SetConsoleMode
WideCharToMultiByte
lstrlenW
GetCommandLineW
SetLastError
GetModuleFileNameW
WaitForSingleObject
AddVectoredExceptionHandler
SetThreadStackGuarantee
SetConsoleTextAttribute
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
FormatMessageW
LoadLibraryExA
GetProcAddress
FreeLibrary
FindNextFileW
GetFileInformationByHandle
FindClose
LockFileEx
UnlockFile
ReadConsoleInputW
Sleep
GlobalLock
GlobalSize
GlobalUnlock
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
GetModuleHandleA
GetCurrentThread
TryAcquireSRWLockExclusive
MultiByteToWideChar
QueryPerformanceFrequency
GetModuleHandleW
GetCurrentDirectoryW
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcess
GetCurrentProcessId
CreateMutexA
ReleaseMutex
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
GetEnvironmentVariableW
CreateFileW
SetFileInformationByHandle
GetFileInformationByHandleEx
GetFullPathNameW
SetFilePointerEx
CreateDirectoryW
FindFirstFileW
ReadConsoleW
SetHandleInformation
CreateThread
ExitProcess
GetSystemTimeAsFileTime
AcquireSRWLockShared
ReleaseSRWLockShared
GetFileType
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
TerminateProcess

user32

CloseClipboard
GetClipboardData
OpenClipboard

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

ws2_32

WSASend
recv
getsockopt
select
connect
ioctlsocket
WSASocketW
WSACleanup
WSAStartup
WSARecv
freeaddrinfo
getaddrinfo
setsockopt
send
WSAGetLastError
closesocket

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

ntdll

RtlNtStatusToDosError
NtWriteFile
NtReadFile

oleaut32

SysFreeString
SysStringLen
GetErrorInfo

vcruntime140

memcmp
__current_exception
__current_exception_context
memcpy
__CxxFrameHandler3
__C_specific_handler
_CxxThrowException
memset
memmove

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
__p___argv
__p___argc
_seh_filter_exe
_exit
exit
_initterm_e
strerror
_set_app_type
_initterm
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-math-l1-1-0

fmod
exp
tanh
log
cosh
sinh
atan
acos
asin
tan
cos
_hypot
sin
ceil
__setusermatherr
atan2
log1p
log10
pow
trunc
round
floor
tgamma
log2

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cfc371a271b8d2592f3863484f521046

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

ole32

ws2_32

bcrypt

advapi32

ntdll

oleaut32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 2.5MB - Virtual size: 2.5MB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 106KB - Virtual size: 106KB

.reloc Size: 96KB - Virtual size: 95KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 2.5MB - Virtual size: 2.5MB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 106KB - Virtual size: 106KB

.reloc
Size: 96KB - Virtual size: 95KB