f783a8a5338c11137f29fd9dd11586e0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

f783a8a5338c11137f29fd9dd11586e0N.exe
Size

120KB
MD5

f783a8a5338c11137f29fd9dd11586e0
SHA1

a16132699c8e9d8bbe6f819e1d8d950d1d632475
SHA256

afb7f1356428bb185d8446ab023db8fd8b4583c89b709b71e50f1a1189ec3867
SHA512

e5bfb4578f74d05c5ab56642a69c23970a80e75fbcc7280568e7508c82b38a5060f1c2b4184611d8b006da0b5c4e60a03ba8d509274d706bcd3a7507d2039876
SSDEEP

3072:JUZyIoB7KB8Q1p5Rpgkc3xYppijtW8dY:VY8QNBgjtWf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f783a8a5338c11137f29fd9dd11586e0N.exe

Files

f783a8a5338c11137f29fd9dd11586e0N.exe
.dll windows:6 windows x64 arch:x64

40e46674f9679947c0e29b31952dba75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_terminate
_CxxThrowException
__CxxFrameHandler3
memcpy
memmove
__C_specific_handler
__std_exception_copy
__std_exception_destroy
memset
__std_type_info_destroy_list

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-math-l1-1-0

sqrt
floor
pow
ceil

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_invalid_parameter_noinfo_noreturn

kernel32

QueryPerformanceCounter
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
RtlCaptureContext
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry

Exports

Exports

??0complex@ap@@QEAA@AEBN0@Z
??0complex@ap@@QEAA@AEBN@Z
??0complex@ap@@QEAA@AEBV01@@Z
??0complex@ap@@QEAA@XZ
??4complex@ap@@QEAAAEAV01@AEBN@Z
??4complex@ap@@QEAAAEAV01@AEBV01@@Z
??8ap@@YA_NAEBVcomplex@0@0@Z
??9ap@@YA_NAEBVcomplex@0@0@Z
??Dap@@YA?BVcomplex@0@AEBNAEBV10@@Z
??Dap@@YA?BVcomplex@0@AEBV10@0@Z
??Dap@@YA?BVcomplex@0@AEBV10@AEBN@Z
??Gap@@YA?BVcomplex@0@AEBNAEBV10@@Z
??Gap@@YA?BVcomplex@0@AEBV10@0@Z
??Gap@@YA?BVcomplex@0@AEBV10@@Z
??Gap@@YA?BVcomplex@0@AEBV10@AEBN@Z
??Hap@@YA?BVcomplex@0@AEBNAEBV10@@Z
??Hap@@YA?BVcomplex@0@AEBV10@0@Z
??Hap@@YA?BVcomplex@0@AEBV10@@Z
??Hap@@YA?BVcomplex@0@AEBV10@AEBN@Z
??Kap@@YA?BVcomplex@0@AEBNAEBV10@@Z
??Kap@@YA?BVcomplex@0@AEBV10@0@Z
??Kap@@YA?BVcomplex@0@AEBV10@AEBN@Z
??Xcomplex@ap@@QEAAAEAV01@AEBN@Z
??Xcomplex@ap@@QEAAAEAV01@AEBV01@@Z
??Ycomplex@ap@@QEAAAEAV01@AEBN@Z
??Ycomplex@ap@@QEAAAEAV01@AEBV01@@Z
??Zcomplex@ap@@QEAAAEAV01@AEBN@Z
??Zcomplex@ap@@QEAAAEAV01@AEBV01@@Z
??_0complex@ap@@QEAAAEAV01@AEBN@Z
??_0complex@ap@@QEAAAEAV01@AEBV01@@Z
?abscomplex@ap@@YANAEBVcomplex@1@@Z
?afree@ap@@YAXPEAX@Z
?amalloc@ap@@YAPEAX_K0@Z
?applyreflectionfromtheleft@@YAXAEAV?$template_2d_array@N$00@ap@@NAEBV?$template_1d_array@N$00@2@HHHHAEAV32@@Z
?applyreflectionfromtheright@@YAXAEAV?$template_2d_array@N$00@ap@@NAEBV?$template_1d_array@N$00@2@HHHHAEAV32@@Z
?applyrotationsfromtheleft@@YAX_NHHHHAEBV?$template_1d_array@N$00@ap@@1AEAV?$template_2d_array@N$00@2@AEAV12@@Z
?applyrotationsfromtheright@@YAX_NHHHHAEBV?$template_1d_array@N$00@ap@@1AEAV?$template_2d_array@N$00@2@AEAV12@@Z
?bidiagonalsvddecomposition@@YA_NAEAV?$template_1d_array@N$00@ap@@V12@H_N2AEAV?$template_2d_array@N$00@2@H3H3H@Z
?columnidxabsmax@@YAHAEBV?$template_2d_array@N$00@ap@@HHH@Z
?conj@ap@@YA?BVcomplex@1@AEBV21@@Z
?copyandtranspose@@YAXAEBV?$template_2d_array@N$00@ap@@HHHHAEAV12@HHHH@Z
?copymatrix@@YAXAEBV?$template_2d_array@N$00@ap@@HHHHAEAV12@HHHH@Z
?csqr@ap@@YA?BVcomplex@1@AEBV21@@Z
?generatereflection@@YAXAEAV?$template_1d_array@N$00@ap@@HAEAN@Z
?generaterotation@@YAXNNAEAN00@Z
?iceil@ap@@YAHN@Z
?ifloor@ap@@YAHN@Z
?inplacetranspose@@YAXAEAV?$template_2d_array@N$00@ap@@HHHHAEAV?$template_1d_array@N$00@2@@Z
?lqdecomposition@@YAXAEAV?$template_2d_array@N$00@ap@@HHAEAV?$template_1d_array@N$00@2@@Z
?lqdecompositionunpacked@@YAXV?$template_2d_array@N$00@ap@@HHAEAV12@1@Z
?matrixmatrixmultiply@@YAXAEBV?$template_2d_array@N$00@ap@@HHHH_N0HHHH1NAEAV12@HHHHNAEAV?$template_1d_array@N$00@2@@Z
?matrixvectormultiply@@YAXAEBV?$template_2d_array@N$00@ap@@HHHH_NAEBV?$template_1d_array@N$00@2@HHNAEAV32@HHN@Z
?maxint@ap@@YAHHH@Z
?maxreal@ap@@YANNN@Z
?minint@ap@@YAHHH@Z
?minreal@ap@@YANNN@Z
?multiplybypfrombidiagonal@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@AEAV12@HH_N3@Z
?multiplybyqfrombidiagonal@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@AEAV12@HH_N3@Z
?pi@ap@@YANXZ
?pythag2@@YANNN@Z
?qrdecomposition@@YAXAEAV?$template_2d_array@N$00@ap@@HHAEAV?$template_1d_array@N$00@2@@Z
?qrdecompositionunpacked@@YAXV?$template_2d_array@N$00@ap@@HHAEAV12@1@Z
?randominteger@ap@@YAHH@Z
?randomreal@ap@@YANXZ
?rmatrixbd@@YAXAEAV?$template_2d_array@N$00@ap@@HHAEAV?$template_1d_array@N$00@2@1@Z
?rmatrixbdmultiplybyp@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@AEAV12@HH_N3@Z
?rmatrixbdmultiplybyq@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@AEAV12@HH_N3@Z
?rmatrixbdsvd@@YA_NAEAV?$template_1d_array@N$00@ap@@V12@H_N2AEAV?$template_2d_array@N$00@2@H3H3H@Z
?rmatrixbdunpackdiagonals@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEA_NAEAV?$template_1d_array@N$00@2@2@Z
?rmatrixbdunpackpt@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@HAEAV12@@Z
?rmatrixbdunpackq@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@HAEAV12@@Z
?rmatrixlq@@YAXAEAV?$template_2d_array@N$00@ap@@HHAEAV?$template_1d_array@N$00@2@@Z
?rmatrixlqunpackl@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEAV12@@Z
?rmatrixlqunpackq@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@HAEAV12@@Z
?rmatrixqr@@YAXAEAV?$template_2d_array@N$00@ap@@HHAEAV?$template_1d_array@N$00@2@@Z
?rmatrixqrunpackq@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@HAEAV12@@Z
?rmatrixqrunpackr@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEAV12@@Z
?rmatrixsvd@@YA_NV?$template_2d_array@N$00@ap@@HHHHHAEAV?$template_1d_array@N$00@2@AEAV12@2@Z
?round@ap@@YAHN@Z
?rowidxabsmax@@YAHAEBV?$template_2d_array@N$00@ap@@HHH@Z
?sign@ap@@YAHN@Z
?sqr@ap@@YANN@Z
?svddecomposition@@YA_NV?$template_2d_array@N$00@ap@@HHHHHAEAV?$template_1d_array@N$00@2@AEAV12@2@Z
?tobidiagonal@@YAXAEAV?$template_2d_array@N$00@ap@@HHAEAV?$template_1d_array@N$00@2@1@Z
?trunc@ap@@YAHN@Z
?unpackdiagonalsfrombidiagonal@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEA_NAEAV?$template_1d_array@N$00@2@2@Z
?unpackptfrombidiagonal@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@HAEAV12@@Z
?unpackqfrombidiagonal@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@HAEAV12@@Z
?unpackqfromlq@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@HAEAV12@@Z
?unpackqfromqr@@YAXAEBV?$template_2d_array@N$00@ap@@HHAEBV?$template_1d_array@N$00@2@HAEAV12@@Z
?upperhessenberg1norm@@YANAEBV?$template_2d_array@N$00@ap@@HHHHAEAV?$template_1d_array@N$00@2@@Z
?vadd@ap@@YAXPEANPEBNH@Z
?vadd@ap@@YAXPEANPEBNHN@Z
?vadd@ap@@YAXPEAVcomplex@1@PEBV21@H@Z
?vadd@ap@@YAXPEAVcomplex@1@PEBV21@HN@Z
?vadd@ap@@YAXPEAVcomplex@1@PEBV21@HV21@@Z
?vdotproduct@ap@@YA?AVcomplex@1@PEBV21@0H@Z
?vdotproduct@ap@@YANPEBN0H@Z
?vectoridxabsmax@@YAHAEBV?$template_1d_array@N$00@ap@@HH@Z
?vectornorm2@@YANAEBV?$template_1d_array@N$00@ap@@HH@Z
?vlen@ap@@YAHHH@Z
?vmove@ap@@YAXPEANPEBNH@Z
?vmove@ap@@YAXPEANPEBNHN@Z
?vmove@ap@@YAXPEAVcomplex@1@PEBV21@H@Z
?vmove@ap@@YAXPEAVcomplex@1@PEBV21@HN@Z
?vmove@ap@@YAXPEAVcomplex@1@PEBV21@HV21@@Z
?vmoveneg@ap@@YAXPEANPEBNH@Z
?vmoveneg@ap@@YAXPEAVcomplex@1@PEBV21@H@Z
?vmul@ap@@YAXPEANHN@Z
?vmul@ap@@YAXPEAVcomplex@1@HN@Z
?vmul@ap@@YAXPEAVcomplex@1@HV21@@Z
?vsub@ap@@YAXPEANPEBNH@Z
?vsub@ap@@YAXPEANPEBNHN@Z
?vsub@ap@@YAXPEAVcomplex@1@PEBV21@H@Z
?vsub@ap@@YAXPEAVcomplex@1@PEBV21@HN@Z
?vsub@ap@@YAXPEAVcomplex@1@PEBV21@HV21@@Z

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

40e46674f9679947c0e29b31952dba75

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 94KB - Virtual size: 94KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 64B

.text
Size: 94KB - Virtual size: 94KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 64B