CppCLR_WinformsProjekt1[.]exe

Resubmissions

23/02/2024, 05:56

240223-gm8ryacc9s 3

23/02/2024, 05:13

240223-fwxwcsbf5w 3

Sharing

Copy URL Twitter E-mail

General

Target

CppCLR_WinformsProjekt1.exe
Size

184KB
MD5

3851f8e96fe6f7da9b20da9c220521ca
SHA1

e7475030ae87f934c6aaba9fd39b864262f8656f
SHA256

db94e83a21d8ffd8326350a4b7ff6fc8a8bff352b92300f3323d96059e4844db
SHA512

38c3715efcec14194c1c0697f992f52dceb6d2c64df723b744a9249b033ca4e4087667d4831527957ea5d72748f45c8ec32f5734feb128b98bbb006a31c6fc90
SSDEEP

3072:K6SL0fsXzNchjhVgimvmNXzWJ0qc8QItiNYJy:KDYfsp2hVgimvmNXzWJ0qc8QItiNYI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CppCLR_WinformsProjekt1.exe

Files

CppCLR_WinformsProjekt1.exe
.exe windows:6 windows x64 arch:x64

a1f5f2742f0de9a18b5f2d55cb9e0bac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Jack\source\repos\ConsoleApplication126\x64\Release\CppCLR_WinformsProjekt1.pdb

Imports

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__stdio_common_vsprintf
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

kernel32

IsProcessorFeaturePresent
GetCurrentThreadId
GetModuleHandleW
Sleep
QueryPerformanceCounter
GetCurrentProcessId
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetSystemTimeAsFileTime

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_initialize_onexit_table
terminate
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_crt_atexit
abort
_crt_at_quick_exit
_configure_narrow_argv
_cexit
_initialize_narrow_environment

vcruntime140

__FrameUnwindFilter
memmove
__CxxDetectRethrow
__CxxQueryExceptionSize
__CxxExceptionFilter
_CxxThrowException
__CxxUnregisterExceptionObject
memset
__std_exception_copy
__std_exception_destroy
__C_specific_handler
__CxxRegisterExceptionObject

msvcp140

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z

api-ms-win-crt-string-l1-1-0

strtok

api-ms-win-crt-convert-l1-1-0

wcstombs

mscoree

_CorExeMain

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

a1f5f2742f0de9a18b5f2d55cb9e0bac

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

api-ms-win-crt-runtime-l1-1-0

vcruntime140

msvcp140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

mscoree

Sections

.text Size: 18KB - Virtual size: 18KB

.nep Size: 4KB - Virtual size: 3KB

.rdata Size: 114KB - Virtual size: 114KB

.data Size: 4KB - Virtual size: 4KB

.pdata Size: 512B - Virtual size: 444B

.rsrc Size: 41KB - Virtual size: 41KB

.reloc Size: 512B - Virtual size: 64B

.text
Size: 18KB - Virtual size: 18KB

.nep
Size: 4KB - Virtual size: 3KB

.rdata
Size: 114KB - Virtual size: 114KB

.data
Size: 4KB - Virtual size: 4KB

.pdata
Size: 512B - Virtual size: 444B

.rsrc
Size: 41KB - Virtual size: 41KB

.reloc
Size: 512B - Virtual size: 64B