c5d93439649c2c34e86bd320ad787115059bb0ca0a7f9faeda63105019dfeb69

Sharing

Copy URL Twitter E-mail

General

Target

c5d93439649c2c34e86bd320ad787115059bb0ca0a7f9faeda63105019dfeb69
Size

131KB
MD5

a2b020c61e0db48e227fa7de1608ba15
SHA1

60978b9aaeeea37b376b733dda78fdc4d78d173c
SHA256

c5d93439649c2c34e86bd320ad787115059bb0ca0a7f9faeda63105019dfeb69
SHA512

5f8dae7d2c8686a6a8eaa3fd29fa3e817daa976b6999bee0aa8009449c76a81067043d872b1fb1199d6a8e3f747534dd7715e3e09f2023d63c469fd0e762d909
SSDEEP

3072:yqDNmDmbmHm3m7m3m7mVmDmbmHm3m7m3m7mo2rmxrGxrnsDuMzRDOKg3J42hQ5Y:H0pcCwKg2QQS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5d93439649c2c34e86bd320ad787115059bb0ca0a7f9faeda63105019dfeb69

Files

c5d93439649c2c34e86bd320ad787115059bb0ca0a7f9faeda63105019dfeb69
.dll windows:6 windows x64 arch:x64

01515eda3bc6d4fc06ae936eaf6a40cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

W:\TT-Miner(SOLUTION)\AlgosCuda\AlgoSha256D\Project-Windows\bin\x64\Release\AlgoSha256D.pdb

Imports

tt-subsystem

??0CLightDynString@@QEAA@PEBD@Z
??0CEventHandler@@QEAA@XZ
??Ouint256_type@@QEBA_NAEBV0@@Z
??0uint256_type@@QEAA@PEBD@Z
??0CLightDynString@@QEAA@AEBV0@@Z
?AppendFormat@CLightDynString@@QEAAXPEBDZZ
??4CLightDynString@@QEAAAEAV0@AEBV0@@Z
?Replace@CLightDynString@@QEAA_KPEBD0@Z
?UpdateLength@CLightDynString@@QEAAXXZ
??BCLightDynString@@QEBAPEADXZ
?DescrambleDecompressData@@YA?AUBUFFER_RAW_LT@@AEBU1@@Z
??0CLightDynString@@QEAA@AEBUBUFFER_RAW_LT@@@Z
??0uint256_type@@QEAA@XZ
?KillAllTimer@CEventHandler@@QEAAXXZ
??BCLightDynString@@QEBAPEBDXZ
?ToNow@datetime_t@@QEAAXW4ENUM_DATETIMETYPE@@@Z
?PostEvent@@YA_KPEAX_K11@Z
?st_free@@YAXPEAX@Z
?EndianSwap@uint256_type@@QEAAXXZ
??0CLightDynString@@QEAA@_K@Z
?st_malloc@@YAPEAX_KAEBUsource_location@std@@@Z
?running@timemeasure_t@@QEAA_NXZ
?InSeconds@duration_t@@QEBA_JXZ
?elapsed@timemeasure_t@@QEAA?AVduration_t@@XZ
?stop@timemeasure_t@@QEAAXXZ
?start@timemeasure_t@@QEAAXXZ
?PostEvent@CEventHandler@@QEAA_K_K00@Z
?SetFireOnce@CEventHandler@@QEAAPEAXII_K0@Z
?GetEvHandle@CEventHandler@@QEBAPEAXXZ
??0CLightDynString@@QEAA@$$QEAV0@@Z
?Format@CLightDynString@@QEAAXPEBDZZ
??1CLightDynString@@QEAA@XZ
??1CEventHandler@@UEAA@XZ

msvcp140

?_Xlength_error@std@@YAXPEBD@Z
?_Random_device@std@@YAIXZ

ws2_32

WSACleanup
WSAStartup

kernel32

RtlCaptureContext
GetCurrentProcessId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
GetCurrentThreadId

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
__std_type_info_destroy_list
memmove
_CxxThrowException
__std_terminate
strstr
__std_exception_copy
__std_exception_destroy
__current_exception
__current_exception_context
__C_specific_handler
memcpy

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-crt-string-l1-1-0

strcpy_s

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_initterm
_cexit
terminate
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s

api-ms-win-crt-utility-l1-1-0

_byteswap_ulong
_byteswap_uint64

Exports

Exports

GetPlugin
ReleasePlugin
dll_PluginInfo

Sections

.text
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 512B - Virtual size: 89B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01515eda3bc6d4fc06ae936eaf6a40cd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

tt-subsystem

msvcp140

ws2_32

kernel32

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

Exports

Exports

Sections

.text Size: 97KB - Virtual size: 96KB

data Size: 512B - Virtual size: 128B

text Size: 512B - Virtual size: 89B

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 9KB - Virtual size: 10KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 432B

.text
Size: 97KB - Virtual size: 96KB

data
Size: 512B - Virtual size: 128B

text
Size: 512B - Virtual size: 89B

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 9KB - Virtual size: 10KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 432B