ImguiPortfolio5[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ImguiPortfolio5.exe
Size 3.0MB
Sample260706-yspppagy4j
SHA256 69bf7cc472f38f81b69ad74007b666350af1557783ac5f5bbb819ee434dd5d35
MD5 903288da2077ffc8ae34d33f1edfb798
SHA1 2b5bf4b30510b0eb637f4e4ea0e0777318eee26e
SHA512 c12e88bd45f6b2137b4aa5ffed5f8c77df04ef12b56893c8e68b85f48be6b86dc68d567e8fb2362343d66431104626741fd53b585543fc2de94d2efa78b488f9
SSDEEP 49152:mQYDPQPpigu6w4LkuQTlf2hlJ6vfTsJEQvvYRUceppCapzHpGYf/:m4FauuN2XJ6vfTsJEKcqpGYf/
TLSH
T132E5AF86F2D268ECC527D23442A76B37B630B85002229F7757D49B342E53ED05F9AF29
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ImguiPortfolio5.exe

File Explorer

ImguiPortfolio5.exe

.exe 3.0MB

ImguiPortfolio5.exe

IMPHASH 9799b552a325b228403a78aeb8039db9
SHA256 69bf7cc472f38f81b69ad74007b666350af1557783ac5f5bbb819ee434dd5d35
MD5 903288da2077ffc8ae34d33f1edfb798
SHA1 2b5bf4b30510b0eb637f4e4ea0e0777318eee26e
SHA512 c12e88bd45f6b2137b4aa5ffed5f8c77df04ef12b56893c8e68b85f48be6b86dc68d567e8fb2362343d66431104626741fd53b585543fc2de94d2efa78b488f9
SSDEEP 49152:mQYDPQPpigu6w4LkuQTlf2hlJ6vfTsJEQvvYRUceppCapzHpGYf/:m4FauuN2XJ6vfTsJEKcqpGYf/
TLSH
T132E5AF86F2D268ECC527D23442A76B37B630B85002229F7757D49B342E53ED05F9AF29
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5072

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDevice

d3dcompiler_47

D3DCompile

dcomp

DCompositionCreateDevice

dwmapi

DwmEnableBlurBehindWindow DwmExtendFrameIntoClientArea DwmGetColorizationColor DwmIsCompositionEnabled DwmSetWindowAttribute

gdi32

CreateRectRgn DeleteObject GetDeviceCaps

kernel32

CloseHandle CreateFileA CreateFileMappingA DeleteCriticalSection EnterCriticalSection FreeLibrary GetFileSizeEx GetLastError GetLocaleInfoA GetModuleHandleA GetModuleHandleW GetProcAddress GetProcessHeap GlobalAlloc GlobalFree GlobalLock GlobalUnlock HeapAlloc HeapFree HeapReAlloc InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryA MapViewOfFile MultiByteToWideChar QueryPerformanceCounter QueryPerformanceFrequency ReadFile SetUnhandledExceptionFilter Sleep TlsGetValue UnmapViewOfFile VerSetConditionMask VirtualProtect VirtualQuery WideCharToMultiByte __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _initterm _lock _onexit _setjmp _unlock abort atof calloc exit fclose feof ferror fflush fgetc fopen fprintf fputc fread free fseek ftell fwrite getc getenv isspace isxdigit localeconv longjmp malloc memchr memcmp memcpy memmove memset qsort realloc signal strcat strchr strcmp strcpy strerror strlen strncmp strncpy strrchr strstr strtol strtoul tolower toupper ungetc vfprintf wcslen _strtoui64 _strtoi64

shell32

ShellExecuteA

user32

ClientToScreen CloseClipboard CreateWindowExW DefWindowProcW DestroyWindow DispatchMessageA EmptyClipboard GetAsyncKeyState GetCapture GetClientRect GetClipboardData GetCursorPos GetDC GetForegroundWindow GetKeyNameTextA GetKeyState GetKeyboardLayout GetMessageExtraInfo GetSystemMetrics GetWindowLongPtrW GetWindowRect IsChild IsWindowUnicode LoadCursorA MapVirtualKeyA MonitorFromWindow OpenClipboard PeekMessageA PostQuitMessage RegisterClassExW ReleaseCapture ReleaseDC ScreenToClient SetCapture SetClipboardData SetCursor SetCursorPos SetLayeredWindowAttributes SetProcessDPIAware SetWindowLongPtrW SetWindowPos ShowWindow TrackMouseEvent TranslateMessage UnregisterClassW UpdateWindow WindowFromPoint

libgcc_s_seh-1

_Unwind_Resume __emutls_get_address

libstdc++-6

_ZNKSt8__detail20_Prime_rehash_policy14_M_need_rehashEyyy _ZSt17__throw_bad_allocv _ZSt18_Rb_tree_decrementPSt18_Rb_tree_node_base _ZSt18_Rb_tree_incrementPSt18_Rb_tree_node_base _ZSt19__throw_logic_errorPKc _ZSt20__throw_length_errorPKc _ZSt28__throw_bad_array_new_lengthv _ZSt29_Rb_tree_insert_and_rebalancebPSt18_Rb_tree_node_baseS0_RS_ _ZdlPvy _Znwy __cxa_guard_abort __cxa_guard_acquire __cxa_guard_release __gxx_personality_seh0

Name

.text

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

704KB

Virtual Size

704KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

192KB

Virtual Size

192KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

30KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

37KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

122KB

Virtual Size

122KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

59KB

Virtual Size

59KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

74KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

ImguiPortfolio5.exe

d3d11

d3dcompiler_47

dcomp

dwmapi

gdi32

kernel32

msvcrt

shell32

user32

libgcc_s_seh-1

libstdc++-6

generic