Interpretari v1[.]1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Interpretari v1.1.exe
Size

150KB
MD5

9786496cbd61186d8bbee7952644588d
SHA1

5ce3d001408708670f2a6573a43edcf38d37a984
SHA256

2ebdef50ebfbc3caf8231b7279be2191e6441eb9dfacc2be02eaa68bff791326
SHA512

dda5c7877765c1d0d0470ef3639e812c3df082b5a503f3973450b5dbf66fc3795cce9b0b69c2e8f688391d0df2a33b8aa61bee6e8315ab9aafa8d95026b8d10b
SSDEEP

3072:RNA1Kn88coO8xiMEXX2R6ah7CgIGNDdxHdXVg7:RjeobEXX28ah7CgIGvxHdlS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Interpretari v1.1.exe

Files

Interpretari v1.1.exe
.exe windows:6 windows x64 arch:x64

86853a4ca94383e7a11d1f271b2b7e7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Alex\source\repos\baubau\x64\Release\baubau.pdb

Imports

msvcp140

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?_Xlength_error@std@@YAXPEBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf
__stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

kernel32

UnhandledExceptionFilter
Sleep
GetModuleHandleW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
GetStartupInfoW
WideCharToMultiByte

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_execute_onexit_table
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
terminate
_crt_atexit
_crt_at_quick_exit
_invalid_parameter_noinfo_noreturn
_cexit
abort
_configure_narrow_argv

vcruntime140

__FrameUnwindFilter
memset
__current_exception_context
__current_exception
__C_specific_handler
_CxxThrowException
__std_exception_copy
__std_exception_destroy
memcpy

api-ms-win-crt-convert-l1-1-0

strtol

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86853a4ca94383e7a11d1f271b2b7e7b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcp140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

api-ms-win-crt-runtime-l1-1-0

vcruntime140

api-ms-win-crt-convert-l1-1-0

mscoree

Sections

.text Size: 26KB - Virtual size: 26KB

.nep Size: 4KB - Virtual size: 3KB

.rdata Size: 112KB - Virtual size: 111KB

.data Size: 4KB - Virtual size: 4KB

.pdata Size: 1024B - Virtual size: 528B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 156B

.text
Size: 26KB - Virtual size: 26KB

.nep
Size: 4KB - Virtual size: 3KB

.rdata
Size: 112KB - Virtual size: 111KB

.data
Size: 4KB - Virtual size: 4KB

.pdata
Size: 1024B - Virtual size: 528B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 156B