f9f5e2b5bf226c7a7940769aac3bd8896af2b4cad77bc8b988994e087b2f60be

Sharing

Copy URL

Twitter E-mail

General

Target

f9f5e2b5bf226c7a7940769aac3bd8896af2b4cad77bc8b988994e087b2f60be
Size

378KB
MD5

7e56d16ccc5c97e8ee11f054ab3c1058
SHA1

83c88a0102cc97810d12cae02d8d59192efc7537
SHA256

f9f5e2b5bf226c7a7940769aac3bd8896af2b4cad77bc8b988994e087b2f60be
SHA512

27712836f6d9c4de748118286ff5ba883762208fcb8cba0c941559867de8944d6c9722653bd487fb622aad1480e3f0e07954e9896790d9075345bba3fc78cfd0
SSDEEP

6144:Ck6qXwk85OXZiTXIJvbTzuQuGIvz+3FHfsy5XLBxuHWnan2A6VqSkxWSctmv:CmXn8IJiDIJbkJz+5sy92HcanTV2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9f5e2b5bf226c7a7940769aac3bd8896af2b4cad77bc8b988994e087b2f60be

Files

f9f5e2b5bf226c7a7940769aac3bd8896af2b4cad77bc8b988994e087b2f60be
.exe windows:6 windows x64 arch:x64

c3a26b270432318a74f5d415282b4062

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\assemblage\Builds\392458575856389824ddpzizlebp\Ecosystem-main\CS380_Research\assemblage_outdir_bin\CS380_Research.pdb

Imports

opengl32

wglGetProcAddress

kernel32

TlsSetValue
TlsGetValue
MultiByteToWideChar
GetModuleHandleW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
FreeConsole
RtlLookupFunctionEntry
RtlVirtualUnwind
TlsAlloc
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalUnlock
TlsFree
QueryPerformanceCounter
QueryPerformanceFrequency
UnhandledExceptionFilter
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
EnterCriticalSection
RtlCaptureContext
CloseHandle

user32

CopyIcon
PtInRect
SetCapture
ReleaseCapture
TrackMouseEvent
DefWindowProcW
GetPropW
RegisterClassExW
LoadImageW
ScreenToClient
TranslateMessage
GetRawInputDeviceInfoA
GetRawInputDeviceList
ChangeDisplaySettingsExW
EnumDisplaySettingsExW
EnumDisplaySettingsW
RegisterDeviceNotificationW
SystemParametersInfoW
WindowFromPoint
IsZoomed
IsWindowVisible
IsIconic
GetActiveWindow
GetWindowLongW
SetWindowLongW
BringWindowToTop
SetForegroundWindow
SetFocus
ShowWindow
SetCursor
LoadCursorW
SetCursorPos
EnumDisplayDevicesW
GetCursorPos
DestroyIcon
UnregisterClassW
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetDC
AdjustWindowRectEx
ClipCursor
ClientToScreen
GetClientRect
GetKeyState
GetAsyncKeyState
PeekMessageW
GetMessageTime
SetWindowPos
RemovePropW
DestroyWindow
CreateWindowExW
SetPropW
DispatchMessageW

gdi32

GetDeviceCaps
CreateDCW
SetDeviceGammaRamp
SwapBuffers
SetPixelFormat
DescribePixelFormat
DeleteDC

shell32

DragFinish
DragAcceptFiles
DragQueryPoint
DragQueryFileW

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

msvcp140

?_Random_device@std@@YAIXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp
_CxxThrowException
__C_specific_handler
__current_exception_context
__current_exception
memcpy
memchr
_purecall
__std_exception_copy
__std_exception_destroy
strstr
memmove
memset
__RTDynamicCast

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
__p__commode
ftell
__stdio_common_vfprintf
fseek
fclose
fflush
__acrt_iob_func

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
_strdup
strcmp

api-ms-win-crt-utility-l1-1-0

rand
qsort
srand

api-ms-win-crt-heap-l1-1-0

malloc
free
realloc
calloc
_set_new_mode
_callnewh

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_cexit
_initialize_onexit_table
_seh_filter_exe
_set_app_type
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_configure_narrow_argv
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
terminate
_invalid_parameter_noinfo_noreturn
_wassert
_register_onexit_function

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-math-l1-1-0

ceilf
sqrtf
floorf
log2f
powf
cosf
sqrt
pow
fmodf
__setusermatherr
sinf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 274KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3a26b270432318a74f5d415282b4062

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

opengl32

kernel32

user32

gdi32

shell32

imm32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 274KB - Virtual size: 273KB

.rdata Size: 84KB - Virtual size: 84KB

.data Size: 2KB - Virtual size: 8KB

.pdata Size: 16KB - Virtual size: 15KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 288B

.text
Size: 274KB - Virtual size: 273KB

.rdata
Size: 84KB - Virtual size: 84KB

.data
Size: 2KB - Virtual size: 8KB

.pdata
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 288B