internalstreamable[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

internalstreamable.exe
Size

264KB
MD5

78f08f0e2d6e17db0504be76d4f3635b
SHA1

873177af3dea4ea9a0e665578184049cf8c2a941
SHA256

ba6417838480b34da67db55b88b4f97851ea3a9df0de8eaacc7df80d0333df08
SHA512

625f2960659945fdd285e667dca9cd388316330f838a1e33e0708ff50c1c9e3d469790cf45711f7e3358178b17f673d0d3e12ddbddd613f6b2cd33df50bec882
SSDEEP

6144:zU51/6QERn6mkIqeBwoFJVMMrrbYr99uK2b/S1qs7ey70m32:zp6lIqeBtJ9rrzK2b/YLom3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
internalstreamable.exe

Files

internalstreamable.exe
.exe windows:6 windows x86 arch:x86

819c870ed77982f5b875be7c7bac8d27

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\brend\Desktop\internal streamable\Release\internalstreamable.pdb

Imports

d3d9

Direct3DCreate9

kernel32

GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
WideCharToMultiByte
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
GetModuleHandleA
MultiByteToWideChar
Sleep

user32

SetCapture
ScreenToClient
LoadCursorA
ClientToScreen
GetKeyState
TrackMouseEvent
SetCursor
GetClientRect
IsWindowUnicode
GetKeyboardLayout
GetMessageExtraInfo
GetForegroundWindow
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
UpdateWindow
RegisterClassExA
PostQuitMessage
UnregisterClassA
PeekMessageA
TranslateMessage
CreateWindowExA
ShowWindow
SetWindowPos
DefWindowProcW
DispatchMessageA
GetWindowRect
DestroyWindow
GetCapture

msvcp140

_Query_perf_frequency
_Query_perf_counter

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow

vcruntime140

__current_exception_context
__current_exception
_except_handler4_common
strstr
__std_terminate
__CxxFrameHandler3
memset
memchr
memcpy
memmove

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
fseek
fclose
_wfopen
__acrt_iob_func
ftell
__stdio_common_vsprintf
fread
fflush
__stdio_common_vsscanf
__p__commode
_set_fmode
fwrite

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-string-l1-1-0

strncpy
strncmp

api-ms-win-crt-heap-l1-1-0

free
malloc
_set_new_mode

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-runtime-l1-1-0

_c_exit
_register_thread_local_exe_atexit_callback
_initterm_e
_initterm
_exit
_controlfp_s
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_initialize_onexit_table
terminate
_seh_filter_exe
_register_onexit_function
_cexit
_crt_atexit
exit

api-ms-win-crt-math-l1-1-0

_libm_sse2_sin_precise
__setusermatherr
_libm_sse2_acos_precise
_libm_sse2_cos_precise
_libm_sse2_sqrt_precise
_CIfmod
ceil

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 225KB - Virtual size: 225KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

819c870ed77982f5b875be7c7bac8d27

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d9

kernel32

user32

msvcp140

imm32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 225KB - Virtual size: 225KB

.rdata Size: 30KB - Virtual size: 30KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 225KB - Virtual size: 225KB

.rdata
Size: 30KB - Virtual size: 30KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 6KB - Virtual size: 5KB