7be813f0974c4d93539dce73957b416839800f9ba26c80d2a1754310ddba97c1

Sharing

Copy URL Twitter E-mail

General

Target

7be813f0974c4d93539dce73957b416839800f9ba26c80d2a1754310ddba97c1
Size

68KB
MD5

a256af40cb54238043538da744187e68
SHA1

582a839fc5e9ad1710455365988d65d3750dc4db
SHA256

7be813f0974c4d93539dce73957b416839800f9ba26c80d2a1754310ddba97c1
SHA512

52dce91397b2cc70cc10262701e55da1cc9cf8a5c01c50e44b05c106d08c481391018a62b5cb5f332c372db9d6594d0b5b11badd11b3d8ab91a5b9013b4279b8
SSDEEP

768:xQ+sI7PYiZEe2db6+J6drS3gwYkz9gfTNtRKY5U77R/AzWMnYezQXsaWTINN/VyZ:TPYeh+53Zeb8AvYxXmIHVy1GpztYjk1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7be813f0974c4d93539dce73957b416839800f9ba26c80d2a1754310ddba97c1

Files

7be813f0974c4d93539dce73957b416839800f9ba26c80d2a1754310ddba97c1
.exe windows:6 windows x64 arch:x64

a5ea57a802d3d8ebfd271fa6013e10f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\11407\source\repos\AutoClicker_UI0.1\x64\Release\AutoClicker_UI0.1.pdb

Imports

kernel32

Sleep
LoadLibraryA
GetProcAddress
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GlobalFree
GlobalReAlloc
GlobalAlloc
LockResource
DeleteCriticalSection
InitializeCriticalSection
SetConsoleCtrlHandler
FreeConsole
AllocConsole
GetModuleHandleA
GetModuleFileNameA
GetTickCount
CreateThread
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
lstrcpynA
GetConsoleWindow
LeaveCriticalSection
EnterCriticalSection

user32

DestroyIcon
LoadCursorA
AdjustWindowRectEx
GetWindowRect
ValidateRect
ReleaseDC
GetDC
ReleaseCapture
SetCapture
IsWindowVisible
SetWindowPos
DestroyWindow
CreateWindowExA
RegisterClassExA
UnregisterClassA
DefWindowProcA
PostMessageA
SendMessageA
PeekMessageA
DispatchMessageA
ScreenToClient
GetCursorPos
GetForegroundWindow
MapVirtualKeyA
GetAsyncKeyState
DrawTextA
PostQuitMessage
ShowWindow
TranslateMessage
GetKeyNameTextA

msvcp140

_Thrd_detach
_Query_perf_counter
_Thrd_sleep
_Cnd_do_broadcast_at_thread_exit
?_Xlength_error@std@@YAXPEBD@Z
?_Random_device@std@@YAIXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Query_perf_frequency
_Xtime_get_ticks

winmm

timeBeginPeriod
PlaySoundA
timeEndPeriod

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_destroy
__std_exception_copy
__std_terminate
__CxxFrameHandler3
__current_exception_context
__current_exception
memcpy
_CxxThrowException
memset
__C_specific_handler
memmove

api-ms-win-crt-runtime-l1-1-0

_beginthreadex
exit
_get_narrow_winmain_command_line
terminate
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_c_exit
_register_onexit_function
_exit
_initterm_e
_initterm
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo_noreturn
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit

api-ms-win-crt-stdio-l1-1-0

freopen_s
fclose
__p__commode
__acrt_iob_func
_set_fmode

api-ms-win-crt-heap-l1-1-0

free
_callnewh
_set_new_mode
malloc

api-ms-win-crt-math-l1-1-0

sin
__setusermatherr
cos

api-ms-win-crt-multibyte-l1-1-0

_mbsrchr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

shell32

ExtractIconA

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5ea57a802d3d8ebfd271fa6013e10f2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

winmm

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-locale-l1-1-0

shell32

Sections

.text Size: 46KB - Virtual size: 45KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 444B

.text
Size: 46KB - Virtual size: 45KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 444B