4be85f95061b7a6634ad99bc8b4a2ac3c377d364314243fdb9766fa9b495ef76

Sharing

Copy URL Twitter E-mail

General

Target

4be85f95061b7a6634ad99bc8b4a2ac3c377d364314243fdb9766fa9b495ef76
Size

1.4MB
MD5

65bd76daa3602551eb53788e50cb1c7a
SHA1

e2963a8adbe47fa9d4074909d3f1ddde592585dc
SHA256

4be85f95061b7a6634ad99bc8b4a2ac3c377d364314243fdb9766fa9b495ef76
SHA512

d7df535da0afcf37779371ab20efd4dfe0aca2b84ae80efff4517d3bb23fe50fa3c038ec53409a4b8491f5b2bc064f4f36be52897c634ca8b34a35bebe302c13
SSDEEP

24576:9pyMikRA8OHrdSLdcpo4pg97PeAesDPJi3vsjpRUZhPWar1T1FbySKCyqQmGF2nc:9p1APrdudcpo42JKsDxi3EjDox9ToCQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4be85f95061b7a6634ad99bc8b4a2ac3c377d364314243fdb9766fa9b495ef76

Files

4be85f95061b7a6634ad99bc8b4a2ac3c377d364314243fdb9766fa9b495ef76
.dll windows:6 windows x64 arch:x64

596e4a07ffbf9503e172597c77b8c15d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

ShaderCompileWorker-UELibSampleRate.pdb

Imports

shadercompileworker-core

?Malloc@FMemory@@SAPEAX_KI@Z
?GCoreObjectHandlePackageDebug@@3PEAUFObjectHandlePackageDebugData@Private@CoreUObject@UE@@EA
?GCoreComplexObjectPathDebug@@3PEAUFStoredObjectPath@Private@CoreUObject@UE@@EA
?Free@FMemory@@SAXPEAX@Z
?GetBlocks@FNameDebugVisualizer@@SAPEAPEAEXZ
?GCoreObjectArrayForDebugVisualizers@@3PEAVFChunkedFixedUObjectArray@@EA

vcruntime140

__std_type_info_destroy_list
__current_exception
__current_exception_context
__C_specific_handler
memset
memmove
memcpy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_initterm
_register_onexit_function
terminate
_configure_narrow_argv
_seh_filter_dll
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_initialize_narrow_environment
_initterm_e
_initialize_onexit_table

kernel32

GetSystemTimeAsFileTime
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
RtlCaptureContext
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess

Exports

Exports

InitializeModule
src_callback_new
src_callback_read
src_clone
src_delete
src_error
src_float_to_int_array
src_float_to_short_array
src_get_channels
src_get_description
src_get_name
src_get_version
src_int_to_float_array
src_is_valid_ratio
src_new
src_process
src_reset
src_set_ratio
src_short_to_float_array
src_simple
src_strerror

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

596e4a07ffbf9503e172597c77b8c15d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shadercompileworker-core

vcruntime140

vcruntime140_1

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 1.4MB - Virtual size: 1.4MB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 512B - Virtual size: 128B

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 1.4MB - Virtual size: 1.4MB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 512B - Virtual size: 128B