7c2129ad0d7f1c49fd128aeeb2cb3dbf28cee8a980aeab0b9766de39d1df2d94

Sharing

Copy URL Twitter E-mail

General

Target
7c2129ad0d7f1c49fd128aeeb2cb3dbf28cee8a980aeab0b9766de39d1df2d94
Size 52KB
Sample260810-kh6cssdr4s
SHA256 7c2129ad0d7f1c49fd128aeeb2cb3dbf28cee8a980aeab0b9766de39d1df2d94
MD5 5a4bf8752d5a4a1769a05c297ad7d3eb
SHA1 0460834c72a1562d23d6c4c37220c0b43d439d2d
SHA512 1af8b092b60ae9b4ba1fa3afed5fc2d4659ab57f74b5b9b50bab70e2105a59ef884194bcb6b602baa8dee40311f0152bfe9b0bb78d7712f822778724b8ce1ede
SSDEEP 768:7tJDn+4wCmkcc0eQ0oc9/CIpLWjXHQRXy5KYm2GvpWhX+cwIiF3c:DDnXwCmk/Q9cJCIp68RC5KYK4uc23c
TLSH
T1A033CF8AEB5A04ECD97B963D8483111BD2B6F16E3B32E7CF075050A50E367E03D7528A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c2129ad0d7f1c49fd128aeeb2cb3dbf28cee8a980aeab0b9766de39d1df2d94

File Explorer

7c2129ad0d7f1c49fd128aeeb2cb3dbf28cee8a980aeab0b9766de39d1df2d94

.exe 52KB

7c2129ad0d7f1c49fd128aeeb2cb3dbf28cee8a980aeab0b9766de39d1df2d94

IMPHASH b07f69e6f92aea711f85eb889811cce7
SHA256 7c2129ad0d7f1c49fd128aeeb2cb3dbf28cee8a980aeab0b9766de39d1df2d94
MD5 5a4bf8752d5a4a1769a05c297ad7d3eb
SHA1 0460834c72a1562d23d6c4c37220c0b43d439d2d
SHA512 1af8b092b60ae9b4ba1fa3afed5fc2d4659ab57f74b5b9b50bab70e2105a59ef884194bcb6b602baa8dee40311f0152bfe9b0bb78d7712f822778724b8ce1ede
SSDEEP 768:7tJDn+4wCmkcc0eQ0oc9/CIpLWjXHQRXy5KYm2GvpWhX+cwIiF3c:DDnXwCmk/Q9cJCIp68RC5KYK4uc23c
TLSH
T1A033CF8AEB5A04ECD97B963D8483111BD2B6F16E3B32E7CF075050A50E367E03D7528A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10372

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

chiyao-runtime

love_version luaopen_love luaopen_love_jitsetup love_openConsole ?luax_resume@love@@YAHPEAUlua_State@@HPEAH@Z

lua51

lua_createtable lua_getfield lua_pushboolean lua_rawseti lua_pushstring lua_tolstring lua_tonumber lua_type lua_isnumber lua_pushvalue lua_settop lua_gettop lua_newthread lua_close lua_setfield lua_call luaL_openlibs luaL_newstate lua_pushcclosure

kernel32

LocalFree GetProcessHeap HeapFree HeapAlloc GetCommandLineW GetModuleHandleW GetStartupInfoW IsDebuggerPresent InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WideCharToMultiByte GetModuleFileNameW GetFileAttributesW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memset memmove _CxxThrowException __current_exception __current_exception_context memcpy __std_exception_copy __C_specific_handler __std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

exit _exit _initterm_e _initterm _c_exit _register_thread_local_exe_atexit_callback _get_narrow_winmain_command_line _initialize_narrow_environment _configure_narrow_argv _set_app_type _initialize_onexit_table _register_onexit_function _crt_atexit terminate _seh_filter_exe _cexit _invalid_parameter_noinfo_noreturn

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf __p__commode _set_fmode __acrt_iob_func

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-heap-l1-1-0

_set_new_mode free malloc _callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

shell32

CommandLineToArgvW

sdl2

SDL_memcpy SDL_ShowSimpleMessageBox SDL_SetMainReady SDL_strlen SDL_iconv_string SDL_free SDL_wcslen

Sharing

General

Malware Config

Signatures

File Explorer

7c2129ad0d7f1c49fd128aeeb2cb3dbf28cee8a980aeab0b9766de39d1df2d94

chiyao-runtime

lua51

kernel32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

shell32

sdl2

generic