x64[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
x64.exe
Size 47KB
Sample260809-wj8p4abl2v
SHA256 080365585b67b4dcc465d9d56fa7e8f309b240566a5f064a0e6763b9d0206e73
MD5 13980bf1f40bce87bd0eb2cc80c466d0
SHA1 16a2d357444de5ae20286e68fde15e5ebd6c9d9b
SHA512 013b474f6b40f377667b2a5b5e655bcb74c1b90ee5435aea65aaf5eca7e7a10c18323d17249aee291c461ab6cc2a9c3840b225296010d384856a44eb3c181490
SSDEEP 768:4L1PBGy69W2wWA08Gj1xa1JUzi/OQ6CaDB2T4cVBJb0PWG33HP7X:agW2wW/8HUzXQ6XcTDVBJb0NH7
TLSH
T173235B4BF75800E8D9AA82BDCA974906D6B3BC150B21D3CF0340A6262F776D0DDBEB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
x64.exe

File Explorer

x64.exe

.exe 47KB

x64.exe

IMPHASH 97dcaa8afab6f79c27682b6b9a47bd40
SHA256 080365585b67b4dcc465d9d56fa7e8f309b240566a5f064a0e6763b9d0206e73
MD5 13980bf1f40bce87bd0eb2cc80c466d0
SHA1 16a2d357444de5ae20286e68fde15e5ebd6c9d9b
SHA512 013b474f6b40f377667b2a5b5e655bcb74c1b90ee5435aea65aaf5eca7e7a10c18323d17249aee291c461ab6cc2a9c3840b225296010d384856a44eb3c181490
SSDEEP 768:4L1PBGy69W2wWA08Gj1xa1JUzi/OQ6CaDB2T4cVBJb0PWG33HP7X:agW2wW/8HUzXQ6XcTDVBJb0NH7
TLSH
T173235B4BF75800E8D9AA82BDCA974906D6B3BC150B21D3CF0340A6262F776D0DDBEB51
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

28688

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\SJ185907\source\repos\RobloxBanBypass\x64\Release\RobloxBanBypass.pdb

msvcp140

?uncaught_exception@std@@YA_NXZ ?_Xout_of_range@std@@YAXPEBD@Z ?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Winerror_map@std@@YAHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?good@ios_base@std@@QEBA_NXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy __std_exception_destroy __std_exception_copy __std_terminate __C_specific_handler _CxxThrowException __current_exception __current_exception_context memset memmove

api-ms-win-crt-heap-l1-1-0

free _set_new_mode malloc _callnewh

api-ms-win-crt-conio-l1-1-0

_getch

api-ms-win-crt-runtime-l1-1-0

_cexit __p___argv _crt_atexit exit _c_exit _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _register_thread_local_exe_atexit_callback _set_app_type _seh_filter_exe terminate abort _register_onexit_function _initterm_e _invalid_parameter_noinfo_noreturn _initialize_onexit_table __p___argc _exit

api-ms-win-crt-environment-l1-1-0

_dupenv_s

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func _configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

kernel32

QueryPerformanceCounter CreateFileW GetLocaleInfoEx FormatMessageA LocalFree FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW SetFileInformationByHandle AreFileApisANSI CloseHandle GetLastError GetModuleHandleW GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId FindClose IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter