ImGui Standalone[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ImGui Standalone.exe
Size

390KB
MD5

296724f6469b34a45b3f174bacefb3b8
SHA1

2956216d2da4e03dd47b9d0fbc95c0e520f459e8
SHA256

489076982a5e5ac6638108eb8f30766a6be5e8f2b0e1bacae791b1683d0a9776
SHA512

07c77f42dd1387cd325908fcdf3dc79712a1f10286f273ef586ec9c17ea3a5fcb1c34ca6a2d4ff06f032ddcabc993ecd5ad8e203ff92ad7a39be223449f57a63
SSDEEP

6144:TLerGJoaFY0wyZzw8nUbpG/WRvELh63I4Y1GWUhWWFc7rj7t8PSnOJh3QIlL+K:erG/u0zZrUbpoWE4pWUh/cjuSnqQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ImGui Standalone.exe

Files

ImGui Standalone.exe
.exe windows:6 windows x64 arch:x64

78c618a7ca53c025d8cf8e9fe011165d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\lucid\Downloads\ImGui-Standalone-main - Copy\ImGui-Standalone-main\Source\x64\Release\ImGui Standalone.pdb

Imports

d3d11

D3D11CreateDeviceAndSwapChain

kernel32

QueryPerformanceCounter
WaitForSingleObject
GetFileAttributesA
CloseHandle
CreateProcessA
FindFirstFileW
FindNextFileW
FindClose
GetDriveTypeW
GlobalLock
GetCurrentThreadId
GetCurrentProcessId
GlobalFree
GetModuleHandleW
GetProcAddress
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
LocalFree
FreeLibrary
IsDebuggerPresent
GlobalAlloc
MultiByteToWideChar
VerSetConditionMask
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
GlobalUnlock
IsProcessorFeaturePresent
WideCharToMultiByte
GetLastError
GetSystemTimeAsFileTime
GetStartupInfoW
InitializeSListHead

user32

SetFocus
GetAsyncKeyState
DispatchMessageW
PeekMessageW
TranslateMessage
PostQuitMessage
UpdateWindow
GetWindowLongW
DefWindowProcW
AdjustWindowRectEx
GetKeyState
DestroyWindow
GetDC
SetWindowPos
MonitorFromWindow
EnumDisplayMonitors
CreateWindowExW
ScreenToClient
UnregisterClassW
SetWindowTextW
RegisterClassExW
WindowFromPoint
ShowWindow
GetCapture
MessageBoxA
MessageBoxW
SetClipboardData
GetMonitorInfoW
ClientToScreen
IsChild
TrackMouseEvent
GetForegroundWindow
SetLayeredWindowAttributes
GetClientRect
BringWindowToTop
SetCursor
SetCapture
LoadCursorW
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
ReleaseDC
SetCursorPos
IsIconic
SetForegroundWindow
ReleaseCapture
SetProcessDPIAware
SetWindowLongW

gdi32

GetDeviceCaps

ole32

CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
CoCreateInstance

oleaut32

SysAllocString
VariantClear
SysFreeString

msvcp140

??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exception@std@@YA_NXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Thrd_detach
_Mtx_unlock
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
?good@ios_base@std@@QEBA_NXZ
?wcerr@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z

wininet

InternetCheckConnectionW

imm32

ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmAssociateContextEx

d3dcompiler_47

D3DCompile

urlmon

URLDownloadToFileA

winhttp

WinHttpCloseHandle
WinHttpSendRequest
WinHttpReadData
WinHttpOpen
WinHttpConnect
WinHttpCrackUrl
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpReceiveResponse

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memchr
memcmp
memcpy
__std_exception_destroy
__std_exception_copy
__std_terminate
strstr
__C_specific_handler
__current_exception
__current_exception_context
_CxxThrowException
memset
memmove

api-ms-win-crt-heap-l1-1-0

_callnewh
_set_new_mode
malloc
free

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_initialize_onexit_table
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
_exit
terminate
_c_exit
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo_noreturn
exit
_beginthreadex
_register_onexit_function

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__stdio_common_vfprintf
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
__p__commode
ftell
fseek
fclose
fflush
__acrt_iob_func

api-ms-win-crt-string-l1-1-0

strcmp
strncmp
strncpy

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

acosf
sinf
fmodf
cosf
sqrtf
ceilf
__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78c618a7ca53c025d8cf8e9fe011165d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d11

kernel32

user32

gdi32

ole32

oleaut32

msvcp140

wininet

imm32

d3dcompiler_47

urlmon

winhttp

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 312KB - Virtual size: 312KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 3KB - Virtual size: 4KB

.pdata Size: 14KB - Virtual size: 13KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 228B

.text
Size: 312KB - Virtual size: 312KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 3KB - Virtual size: 4KB

.pdata
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 228B