Static task
static1
Behavioral task
behavioral1
Sample
infinity_free_w10.exe
Resource
win10-20240404-en
General
-
Target
infinity_free_w10.exe
-
Size
30.4MB
-
MD5
014268a3e8af05303b24e331a16c759d
-
SHA1
3b5df198ecfb4febb16006a3c8509c58dac4481a
-
SHA256
dd6030bbe936d91f85ce2f045db793cde0c26963bfa59ed72dae0d6ab7ededd8
-
SHA512
d8ca2731446499790f8190b728ed95435813d2489c06ba69b76be3b5e11c14eb66dba86831d19e57d026026d64b5e7b9cdc1babfdae0422ff5e8c4f3c2ef3e32
-
SSDEEP
786432:u1gKwLY/2zaCy3ydsUoGVs78J97fOEeQ3VIi:uBuzaCymhVO8nrVN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource infinity_free_w10.exe
Files
-
infinity_free_w10.exe.exe windows:6 windows x64 arch:x64
5d135490f2b1382c2ce2096282170591
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
WideCharToMultiByte
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetCapture
gdi32
CreateSolidBrush
advapi32
OpenProcessToken
shell32
SHGetFolderPathW
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
ntdll
RtlCaptureContext
dbghelp
ImageNtHeader
d3d11
D3D11CreateDeviceAndSwapChain
imm32
ImmSetCandidateWindow
d3dcompiler_43
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-math-l1-1-0
asin
api-ms-win-crt-string-l1-1-0
isspace
api-ms-win-crt-runtime-l1-1-0
abort
api-ms-win-crt-stdio-l1-1-0
fgetpos
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-time-l1-1-0
strftime
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-utility-l1-1-0
rand
Sections
.text Size: - Virtual size: 768KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 541KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.67] Size: - Virtual size: 18.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pGa Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.EX Size: 30.4MB - Virtual size: 30.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ