5b78fa3632e601fc5a77b88ca411663d46da8c924872ac9abd7bfeec3ffc024d

Sharing

Copy URL Twitter E-mail

General

Target

5b78fa3632e601fc5a77b88ca411663d46da8c924872ac9abd7bfeec3ffc024d
Size

92KB
MD5

67ae07c95bdcd3050fb134dd040937a0
SHA1

7d704e0704f18a1deb2280af119b511405755f62
SHA256

5b78fa3632e601fc5a77b88ca411663d46da8c924872ac9abd7bfeec3ffc024d
SHA512

be4626609c64f7853f6e60c364f74989cebcba6fdaa7a350fb127f1829e97922564717eac3624fc30b4c663fb1923428df9cc8d753854cc9dd39ee9284c6abf8
SSDEEP

1536:K8Mpf9+hLJIzjpXEkZhuJer7/xVy2CSCs01P:KNpfILJFkt/iYCl1P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b78fa3632e601fc5a77b88ca411663d46da8c924872ac9abd7bfeec3ffc024d

Files

5b78fa3632e601fc5a77b88ca411663d46da8c924872ac9abd7bfeec3ffc024d
.dll windows:6 windows x64 arch:x64

ddd9fd50d7d2051e04f75fb2f0edb926

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\mason\Downloads\rage (1)\x64\Release\test.pdb

Imports

kernel32

VirtualProtect
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RtlLookupFunctionEntry
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlVirtualUnwind
RtlCaptureContext

user32

GetAsyncKeyState

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
__std_type_info_destroy_list
__C_specific_handler
__current_exception_context
__current_exception
memcpy
__std_exception_copy
__std_exception_destroy
memset

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-math-l1-1-0

cosf
round
sinf

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_invalid_parameter_noinfo_noreturn
terminate
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddd9fd50d7d2051e04f75fb2f0edb926

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 73KB - Virtual size: 72KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 18KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 96B

.text
Size: 73KB - Virtual size: 72KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 18KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 96B