e326ee44f27b90087d845f01b0f4a1f81f9bb915fd313ec289fea4fccf9aa76e

Sharing

Copy URL

Twitter E-mail

General

Target

e326ee44f27b90087d845f01b0f4a1f81f9bb915fd313ec289fea4fccf9aa76e
Size

151KB
MD5

d1c742af9a1bc0ee49da9b01c5c45de1
SHA1

137d5e8a0fc2ece9cc4018a5b7e11c7d2085cd45
SHA256

e326ee44f27b90087d845f01b0f4a1f81f9bb915fd313ec289fea4fccf9aa76e
SHA512

4e58c36ddd063a1dbb6a25c2c1941ff312c8b8ac7e5db8179dbe28301921c807ab3d17519e271314cd9ce4b2f14321c4fa2190d1ea8ce1174cdda5772c3ed915
SSDEEP

1536:dM26nMRFhNiMKCbIOko9VrhoC3hneZUPzh8CKc:xv3iDCbIONH+C3hn7P98Cj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e326ee44f27b90087d845f01b0f4a1f81f9bb915fd313ec289fea4fccf9aa76e

Files

e326ee44f27b90087d845f01b0f4a1f81f9bb915fd313ec289fea4fccf9aa76e
.exe windows:6 windows x64 arch:x64

87eb719a4084c76fe6962b5e0e72ea7b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\assemblage\Builds\4579150743065628365tvjuxwiths\Dimmer-master\Dimmer\assemblage_outdir_bin\Dimmer.pdb

Imports

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

kernel32

GetCurrentThreadId
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcessId
Sleep
GetSystemTimeAsFileTime

api-ms-win-crt-runtime-l1-1-0

terminate
_cexit
_crt_at_quick_exit
_invalid_parameter_noinfo_noreturn
abort
_crt_atexit
_execute_onexit_table
_seh_filter_dll
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_register_onexit_function

vcruntime140

_CxxThrowException
__C_specific_handler
__current_exception
__CxxUnregisterExceptionObject
memset
__FrameUnwindFilter
__std_exception_copy
__CxxDetectRethrow
__CxxQueryExceptionSize
__CxxExceptionFilter
__std_exception_destroy
__CxxRegisterExceptionObject
__current_exception_context

user32

SetWindowPos
GetDesktopWindow
GetWindowRect
SetWindowLongW
GetWindowLongW

msvcp140

?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

87eb719a4084c76fe6962b5e0e72ea7b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-heap-l1-1-0

kernel32

api-ms-win-crt-runtime-l1-1-0

vcruntime140

user32

msvcp140

mscoree

Sections

.text Size: 17KB - Virtual size: 16KB

.nep Size: 3KB - Virtual size: 2KB

.rdata Size: 119KB - Virtual size: 118KB

.data Size: 4KB - Virtual size: 3KB

.pdata Size: 512B - Virtual size: 456B

.rsrc Size: 6KB - Virtual size: 5KB

.reloc Size: 512B - Virtual size: 136B

.text
Size: 17KB - Virtual size: 16KB

.nep
Size: 3KB - Virtual size: 2KB

.rdata
Size: 119KB - Virtual size: 118KB

.data
Size: 4KB - Virtual size: 3KB

.pdata
Size: 512B - Virtual size: 456B

.rsrc
Size: 6KB - Virtual size: 5KB

.reloc
Size: 512B - Virtual size: 136B