b5760d3b2e962e9bf1df09ce4a90b4bbd5ab56920fa47ddb9ec70ec25c669127

Sharing

Copy URL Twitter E-mail

General

Target
b5760d3b2e962e9bf1df09ce4a90b4bbd5ab56920fa47ddb9ec70ec25c669127
Size 192KB
Sample260719-ebsv8sdy8y
SHA256 b5760d3b2e962e9bf1df09ce4a90b4bbd5ab56920fa47ddb9ec70ec25c669127
MD5 a3a2b78aa1b0825bce8184247d817e4c
SHA1 133748125ae02af37d358d7d92babec56bd0cb43
SHA512 53f4838bb9e1a6b84f1cfe598c2b7295eee09d55282eb3e5b9de8582998a9aced01cb1b7f1dac90e88baec74acb1cc10ddc32cabb2fa580e9aa32851cd9a300c
SSDEEP 3072:0f7uXkbQthkMxFobRMF7mgcbIII/7Pr9+UVdnTOFi8BRKYaw:Mv4FBT7BtOU8Ka
TLSH
T1C314F947BB6140E3C8BAC03D9683D63AF8B2345983B5EBDF968107661763BE4683D345
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5760d3b2e962e9bf1df09ce4a90b4bbd5ab56920fa47ddb9ec70ec25c669127

File Explorer

b5760d3b2e962e9bf1df09ce4a90b4bbd5ab56920fa47ddb9ec70ec25c669127

.dll 192KB

b5760d3b2e962e9bf1df09ce4a90b4bbd5ab56920fa47ddb9ec70ec25c669127

IMPHASH 7d574a4cbd3f8b2763ec4414ac521d9a
SHA256 b5760d3b2e962e9bf1df09ce4a90b4bbd5ab56920fa47ddb9ec70ec25c669127
MD5 a3a2b78aa1b0825bce8184247d817e4c
SHA1 133748125ae02af37d358d7d92babec56bd0cb43
SHA512 53f4838bb9e1a6b84f1cfe598c2b7295eee09d55282eb3e5b9de8582998a9aced01cb1b7f1dac90e88baec74acb1cc10ddc32cabb2fa580e9aa32851cd9a300c
SSDEEP 3072:0f7uXkbQthkMxFobRMF7mgcbIII/7Pr9+UVdnTOFi8BRKYaw:Mv4FBT7BtOU8Ka
TLSH
T1C314F947BB6140E3C8BAC03D9683D63AF8B2345983B5EBDF968107661763BE4683D345
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4891

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Sakura\Desktop\a\dx11_tex_dbg_for_mw-main\build\Debug\dx11_texture_debugger.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

kernel32

GetProcessHeap FreeLibrary CreateFileA ReadFile OutputDebugStringA CloseHandle GetModuleFileNameW MultiByteToWideChar GetLastError HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree Sleep GetCurrentProcess GetCurrentProcessId GetCurrentThreadId OpenThread SuspendThread ResumeThread GetThreadContext SetThreadContext FlushInstructionCache VirtualProtect GetModuleHandleW GetProcAddress CreateToolhelp32Snapshot Thread32First Thread32Next GetSystemInfo VirtualAlloc VirtualFree VirtualQuery ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared TryAcquireSRWLockExclusive TryAcquireSRWLockShared SleepConditionVariableSRW ReleaseSRWLockExclusive GetTickCount64 IsDebuggerPresent RaiseException WideCharToMultiByte SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead

user32

MessageBoxA CallNextHookEx GetForegroundWindow

msvcp140d

?_W_Getmonths@_Locinfo@std@@QEBAPEBGXZ ??0_Lockit@std@@QEAA@H@Z _Query_perf_counter _Query_perf_frequency ?_Xbad_alloc@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z _Thrd_detach ?_W_Getdays@_Locinfo@std@@QEBAPEBGXZ _Cnd_do_broadcast_at_thread_exit ?_Throw_Cpp_error@std@@YAXH@Z ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ??1_Lockit@std@@QEAA@XZ

vcruntime140d

__C_specific_handler_noexcept __C_specific_handler _CxxThrowException __current_exception_context __std_exception_copy wcsrchr memset memcpy __current_exception __vcrt_GetModuleHandleW __vcrt_GetModuleFileNameW __std_exception_destroy __std_type_info_destroy_list __vcrt_LoadLibraryExW

vcruntime140_1d

__CxxFrameHandler4

ucrtbased

_crt_at_quick_exit _cexit _CrtDbgReportW _initterm _initterm_e strcpy_s strcat_s __stdio_common_vsprintf_s _wmakepath_s _wsplitpath_s wcscpy_s _execute_onexit_table _configure_narrow_argv _seh_filter_dll _free_dbg malloc _callnewh _beginthreadex strlen terminate ceilf _wcsicmp wcslen _CrtDbgReport _calloc_dbg _register_onexit_function _initialize_onexit_table _crt_atexit _initialize_narrow_environment

Name

.text

Size

109KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

62KB

Virtual Size

62KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.shared

Size

512B

Virtual Size

428B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b5760d3b2e962e9bf1df09ce4a90b4bbd5ab56920fa47ddb9ec70ec25c669127

d3d11

d3dcompiler_47

kernel32

user32

msvcp140d

vcruntime140d

vcruntime140_1d

ucrtbased

generic