4c19335cbf7cb84ed403a4f0efe9d7a1df989c4ca1035c43275ff3b5b819bf0b[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

4c19335cbf7cb84ed403a4f0efe9d7a1df989c4ca1035c43275ff3b5b819bf0b.exe
Size

3.5MB
MD5

65770d17e66743c507817c3cef452203
SHA1

1af5903793b5c34e8d1144f5db6e01add6da73c0
SHA256

4c19335cbf7cb84ed403a4f0efe9d7a1df989c4ca1035c43275ff3b5b819bf0b
SHA512

8b3c895d77dbde4df38486e5966fc3386a70bc6a7baa6b37f2ef0b3ca4e9fcd76d884189837c3db3b2be962eba93d3ec14893ea4338ba1c0904700cd42a4dfe9
SSDEEP

49152:g/I282eTnmzco6QdasS+ZPCgeV6FZUFMOVr5SOlzddrI2Ye6XxOHGK5TxqYJ8wAk:MEiXC2FZtOZ5SWdd1R6Ym8q3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c19335cbf7cb84ed403a4f0efe9d7a1df989c4ca1035c43275ff3b5b819bf0b.exe

Files

4c19335cbf7cb84ed403a4f0efe9d7a1df989c4ca1035c43275ff3b5b819bf0b.exe
.exe windows:6 windows x64 arch:x64

4e62bef9a8e4ebb1e3c00e34218d1f04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\BRONKZ 03 03 2024\DOWNLOAD ARQUIVOS BRONKZ TUDO\remade (1)\remade\remade\build\husXveru.pdb

Imports

ntdll

VerSetConditionMask
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

kernel32

GetSystemDirectoryA
VerifyVersionInfoA
GetTickCount
MoveFileExA
WaitForSingleObjectEx
GetEnvironmentVariableA
GetStdHandle
GetFileType
PeekNamedPipe
WaitForMultipleObjects
CreateFileA
GetFileSizeEx
ReleaseSRWLockExclusive
LeaveCriticalSection
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
EnterCriticalSection
Process32Next
Process32First
CreateToolhelp32Snapshot
GetConsoleWindow
SetConsoleTitleA
lstrcmpiA
FormatMessageA
SetLastError
GetModuleHandleW
CreateThread
ExitProcess
Sleep
DeviceIoControl
CloseHandle
Beep
ReadFile
CreateFileW
LoadLibraryA
GetProcAddress
GetModuleHandleA
FreeLibrary
QueryPerformanceFrequency
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
GetLastError
SleepEx
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionEx

user32

OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
GetKeyState
GetForegroundWindow
GetClientRect
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
ScreenToClient
LoadCursorA
TranslateMessage
DispatchMessageA
DestroyWindow
ShowWindow
SendInput
GetSystemMetrics
MessageBoxA
GetWindowLongA

d3d11

D3D11CreateDeviceAndSwapChain

msvcp140

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exceptions@std@@YAHXZ
_Xtime_get_ticks
_Query_perf_counter
_Query_perf_frequency
_Thrd_detach
_Thrd_join
_Thrd_sleep
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
_Thrd_id
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow

d3dcompiler_43

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

urlmon

URLDownloadToFileA

normaliz

IdnToAscii

wldap32

ord35
ord33
ord32
ord27
ord26
ord22
ord79
ord50
ord45
ord60
ord211
ord46
ord217
ord301
ord30
ord41
ord143
ord200

crypt32

CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertGetNameStringA
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertFindExtension

ws2_32

bind
connect
recv
closesocket
send
WSAGetLastError
getsockname
getsockopt
htons
ntohs
setsockopt
socket
WSASetLastError
WSAIoctl
WSAStartup
WSACleanup
accept
htonl
listen
ioctlsocket
__WSAFDIsSet
select
ntohl
getaddrinfo
sendto
recvfrom
freeaddrinfo
getpeername
gethostname

vcruntime140

__current_exception_context
__current_exception
strrchr
__C_specific_handler
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcpy
memmove
memset
__std_terminate
strstr
memchr
strchr
memcmp

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_errno
_c_exit
__p___argv
exit
_exit
strerror
_initterm_e
_initterm
_get_initial_narrow_environment
system
_register_thread_local_exe_atexit_callback
_set_app_type
_seh_filter_exe
_cexit
terminate
_crt_atexit
_beginthreadex
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_getpid
_invalid_parameter_noinfo_noreturn
__sys_nerr
__p___argc

api-ms-win-crt-heap-l1-1-0

realloc
free
_callnewh
malloc
calloc
_set_new_mode

api-ms-win-crt-string-l1-1-0

strncmp
strcmp
tolower
strpbrk
strncpy
strcspn
strspn
isupper
_strdup

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
fwrite
ftell
fseek
fread
_open
_close
_write
_read
fflush
__p__commode
_set_fmode
fclose
_wfopen
__acrt_iob_func
_lseeki64
feof
fputs
fopen
fputc
fgets

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

asin
atan2
logf
log
__setusermatherr
cos
cosf
ceilf
pow
tanf
acosf
sinf
sqrtf
powf
sin

api-ms-win-crt-convert-l1-1-0

strtoll
strtol
atoi
strtoul
atof

api-ms-win-crt-filesystem-l1-1-0

_stat64
_fstat64
_unlink
_access
remove

api-ms-win-crt-time-l1-1-0

_gmtime64
_time64

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

advapi32

CryptCreateHash
CryptDestroyKey
CryptEncrypt
CryptDestroyHash
CryptHashData
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
CryptImportKey

Sections

.text
Size: 567KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4e62bef9a8e4ebb1e3c00e34218d1f04

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntdll

d3dx11_43

kernel32

user32

d3d11

msvcp140

imm32

d3dcompiler_43

dwmapi

urlmon

normaliz

wldap32

crypt32

ws2_32

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

advapi32

Sections

.text Size: 567KB - Virtual size: 566KB

.rdata Size: 127KB - Virtual size: 126KB

.data Size: 2.8MB - Virtual size: 2.8MB

.pdata Size: 24KB - Virtual size: 24KB

_RDATA Size: 512B - Virtual size: 464B

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 567KB - Virtual size: 566KB

.rdata
Size: 127KB - Virtual size: 126KB

.data
Size: 2.8MB - Virtual size: 2.8MB

.pdata
Size: 24KB - Virtual size: 24KB

_RDATA
Size: 512B - Virtual size: 464B

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 3KB - Virtual size: 3KB