renameme[.]exe

Resubmissions

15/10/2024, 09:59

241015-lz74dssbrk 7

15/10/2024, 09:55

241015-lxzz1asaqp 7

15/10/2024, 06:48

241015-hkza6azhla 7

Sharing

Copy URL Twitter E-mail

General

Target

renameme.exe
Size

55.3MB
MD5

f57752bb1deef37b1940441f4edddcbe
SHA1

41212eebd65da911210f08d5b0819f2d815a92e5
SHA256

d1f9ccaa3a83a3bb8bf2412f172defee977bfe11c3a5bc8a80c8452d59349cdd
SHA512

d07b3e2e63dde6ae24e91748b2e24bbb7edf381cadb556fd49f5bea7771e77f4bcf471581632d2d2ac882e875b84bb3f7b5d4f2515d575e99acc39c2708c6323
SSDEEP

1572864:jnel83MrqAGM/piy57vJREubbeI0wKDvn86uOWw:jn089ADiy90YbRqvnpNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
renameme.exe

Files

renameme.exe
.exe windows:6 windows x64 arch:x64

5bbe22f51ba0d46f91a90f06c15445df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

iphlpapi

GetAdaptersAddresses

ntdll

VerSetConditionMask

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

imm32

ImmReleaseContext

kernel32

LoadLibraryA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

user32

wsprintfW

advapi32

SetEntriesInAclW

shell32

SHGetSpecialFolderPathW

ole32

CoInitialize

oleaut32

SysAllocString

wintrust

WinVerifyTrust

shlwapi

StrStrW

imagehlp

SymInitialize

bcrypt

BCryptGenRandom

xinput1_4

ord4

crypt32

CertCloseStore

ws2_32

getaddrinfo

Sections

.text
Size: - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sharper
Size: - Virtual size: 39.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sharper
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sharper
Size: 55.3MB - Virtual size: 55.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

5bbe22f51ba0d46f91a90f06c15445df

Headers

DLL Characteristics

File Characteristics

Imports

iphlpapi

ntdll

d3d11

d3dcompiler_47

imm32

kernel32

user32

advapi32

shell32

ole32

oleaut32

wintrust

shlwapi

imagehlp

bcrypt

xinput1_4

crypt32

ws2_32

Sections

.text Size: - Virtual size: 2.6MB

.rdata Size: - Virtual size: 492KB

.data Size: - Virtual size: 9.7MB

.pdata Size: - Virtual size: 84KB

.sharper Size: - Virtual size: 39.0MB

.sharper Size: 4KB - Virtual size: 4KB

.sharper Size: 55.3MB - Virtual size: 55.3MB

.text
Size: - Virtual size: 2.6MB

.rdata
Size: - Virtual size: 492KB

.data
Size: - Virtual size: 9.7MB

.pdata
Size: - Virtual size: 84KB

.sharper
Size: - Virtual size: 39.0MB

.sharper
Size: 4KB - Virtual size: 4KB

.sharper
Size: 55.3MB - Virtual size: 55.3MB