ImguiPortfolio5[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ImguiPortfolio5.exe
Size 3.0MB
Sample260706-yny3kacy71
SHA256 88d44a68a567d490db7443adfaabb768ff5736bb1bda38f645dd9d13d6f2ca30
MD5 1fa9ea20b837190566d850aa9b4e277f
SHA1 a1de75d58ab2e44d30260c59d045066bc28cc070
SHA512 d3028cfa040b1f223852e66d63f1f748aad28bee06a16a263e08dc385f73f3d87bcf463ed2f4dff89152214ed3123a538f57d00ee3c0cb7503275f30e0c221a0
SSDEEP 49152:LXwHcAvQ7AoUfdwrd+U7plWiHemJgjmtJEQvvYRUceKpXQk2zpSpGYf/:Lioad3U1AiHemJgqtJEKc2SpGYf/
TLSH
T16EE5AF86F2D368ECC527D23442A76B37B630B85002229F7757949B342E53ED05F9AF29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ImguiPortfolio5.exe

File Explorer

ImguiPortfolio5.exe

.exe 3.0MB

ImguiPortfolio5.exe

IMPHASH 9799b552a325b228403a78aeb8039db9
SHA256 88d44a68a567d490db7443adfaabb768ff5736bb1bda38f645dd9d13d6f2ca30
MD5 1fa9ea20b837190566d850aa9b4e277f
SHA1 a1de75d58ab2e44d30260c59d045066bc28cc070
SHA512 d3028cfa040b1f223852e66d63f1f748aad28bee06a16a263e08dc385f73f3d87bcf463ed2f4dff89152214ed3123a538f57d00ee3c0cb7503275f30e0c221a0
SSDEEP 49152:LXwHcAvQ7AoUfdwrd+U7plWiHemJgjmtJEQvvYRUceKpXQk2zpSpGYf/:Lioad3U1AiHemJgqtJEKc2SpGYf/
TLSH
T16EE5AF86F2D368ECC527D23442A76B37B630B85002229F7757949B342E53ED05F9AF29
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DCompile

dcomp

DCompositionCreateDevice

dwmapi

DwmEnableBlurBehindWindow DwmExtendFrameIntoClientArea DwmGetColorizationColor DwmIsCompositionEnabled DwmSetWindowAttribute

gdi32

CreateRectRgn DeleteObject GetDeviceCaps

kernel32

CloseHandle CreateFileA CreateFileMappingA DeleteCriticalSection EnterCriticalSection FreeLibrary GetFileSizeEx GetLastError GetLocaleInfoA GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA MapViewOfFile MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReadFile SetUnhandledExceptionFilter Sleep TlsGetValue UnmapViewOfFile VerSetConditionMask VirtualProtect VirtualQuery WideCharToMultiByte __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _initterm _lock _onexit _setjmp _unlock abort atof calloc exit fclose feof ferror fflush fgetc fopen fprintf fputc fread free fseek ftell fwrite getc getenv isspace isxdigit localeconv longjmp malloc memchr memcmp memcpy memmove memset qsort realloc signal strcat strchr strcmp strcpy strerror strlen strncmp strncpy strrchr strstr strtol strtoul tolower toupper ungetc vfprintf wcslen _strtoui64 _strtoi64

shell32

ShellExecuteA

user32

ClientToScreen CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageA EmptyClipboard GetAsyncKeyState GetCapture GetClientRect GetClipboardData GetCursorPos GetDC GetForegroundWindow GetKeyNameTextA GetKeyState GetKeyboardLayout GetMessageExtraInfo GetSystemMetrics GetWindowLongPtrW GetWindowRect IsChild IsWindowUnicode LoadCursorA MapVirtualKeyA MonitorFromWindow OpenClipboard PeekMessageA PostQuitMessage RegisterClassExW ReleaseCapture ReleaseDC ScreenToClient SetCapture SetClipboardData SetCursor SetCursorPos SetLayeredWindowAttributes SetProcessDPIAware SetWindowLongPtrW SetWindowPos ShowWindow TrackMouseEvent TranslateMessage UnregisterClassW UpdateWindow WindowFromPoint

libgcc_s_seh-1

_Unwind_Resume __emutls_get_address

libstdc++-6

_ZNKSt8__detail20_Prime_rehash_policy14_M_need_rehashEyyy _ZSt17__throw_bad_allocv _ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base _ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base _ZSt19__throw_logic_errorPKc _ZSt20__throw_length_errorPKc _ZSt28__throw_bad_array_new_lengthv _ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_ _ZdlPvy _Znwy __cxa_guard_abort __cxa_guard_acquire __cxa_guard_release __gxx_personality_seh0

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

704KB

Virtual Size

704KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

192KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

122KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ImguiPortfolio5.exe

d3d11

d3dcompiler_47

dcomp

dwmapi

gdi32

kernel32

msvcrt

shell32

user32

libgcc_s_seh-1

libstdc++-6

generic