b58480807a3129f06a809e8b1d23afa607ee57bbda94d7013196b591816fa1c0

Sharing

Copy URL Twitter E-mail

General

Target
b58480807a3129f06a809e8b1d23afa607ee57bbda94d7013196b591816fa1c0
Size 1.1MB
Sample260925-qwyg1aed95
SHA256 b58480807a3129f06a809e8b1d23afa607ee57bbda94d7013196b591816fa1c0
MD5 888fa78a7d2e0dbebb34a268fe1c0bf0
SHA1 aadb2dce58fc1c281b6af866639fa0ad970c5ec9
SHA512 5980aa83ee9793815b3c46690dd730dc17140ac3b8c199abd9e3cccc8f6dd637c1c0d48681d0edeb166c4a0e2cb8bed3ebf1dd6fdcba066a98260be4b4754fcf
SSDEEP 24576:FEjXd2eCQkzwDaMn+xnt+5iJnEo7d+Jcm68vc:fw+MUnXJnEo7cJE8vc
TLSH
T16935BF42BAE809ECD06745398475232FB67B7C12273089C797A42D2D5F73BE05AE6F12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b58480807a3129f06a809e8b1d23afa607ee57bbda94d7013196b591816fa1c0

File Explorer

b58480807a3129f06a809e8b1d23afa607ee57bbda94d7013196b591816fa1c0

.exe 1.1MB

b58480807a3129f06a809e8b1d23afa607ee57bbda94d7013196b591816fa1c0

IMPHASH 003af74872ca1769fe02798af99120b3
SHA256 b58480807a3129f06a809e8b1d23afa607ee57bbda94d7013196b591816fa1c0
MD5 888fa78a7d2e0dbebb34a268fe1c0bf0
SHA1 aadb2dce58fc1c281b6af866639fa0ad970c5ec9
SHA512 5980aa83ee9793815b3c46690dd730dc17140ac3b8c199abd9e3cccc8f6dd637c1c0d48681d0edeb166c4a0e2cb8bed3ebf1dd6fdcba066a98260be4b4754fcf
SSDEEP 24576:FEjXd2eCQkzwDaMn+xnt+5iJnEo7d+Jcm68vc:fw+MUnXJnEo7cJE8vc
TLSH
T16935BF42BAE809ECD06745398475232FB67B7C12273089C797A42D2D5F73BE05AE6F12
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

345496

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\fox-[zzz]\爬虫ip\imGui-dx11-2026\imgui1\x64\Release\imgui1.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

kernel32

LoadLibraryA QueryPerformanceFrequency IsDBCSLeadByte GetProcAddress FreeLibrary QueryPerformanceCounter GetModuleFileNameA WriteProcessMemory Wow64DisableWow64FsRedirection WaitForSingleObject UnmapViewOfFile OpenProcess Sleep CopyFileA Wow64RevertWow64FsRedirection GetLastError GetFileAttributesA CloseHandle GetNativeSystemInfo GetWindowsDirectoryA GetLocalTime VirtualAllocEx CreateFileMappingA CreateRemoteThread VirtualFreeEx MapViewOfFile GetTickCount ExitProcess HeapReAlloc HeapSize CreateFileW GetProcessHeap GetStringTypeW SetStdHandle GetLocaleInfoA GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose OutputDebugStringW GetFileSizeEx GetConsoleOutputCP FlushFileBuffers LCMapStringW LoadLibraryExW VirtualProtect HeapFree HeapAlloc ReadConsoleW GetConsoleMode SetFilePointerEx UnhandledExceptionFilter GetModuleHandleA GlobalUnlock WideCharToMultiByte GlobalLock GlobalFree GlobalAlloc GetCurrentProcess WriteFile WriteConsoleW GetModuleHandleExW GetModuleFileNameW MultiByteToWideChar OutputDebugStringA SetEndOfFile FreeEnvironmentStringsW IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection ReadFile GetStdHandle GetFileType TerminateProcess

user32

GetDC SetClipboardData GetClipboardData EmptyClipboard OpenClipboard DestroyWindow CreateWindowExW GetIconInfo GetSystemMetrics UnregisterClassW RegisterClassExW ShowWindow DispatchMessageW DestroyIcon PeekMessageW MessageBoxA TranslateMessage wsprintfW PostQuitMessage UpdateWindow DefWindowProcW GetKeyState GetMessageExtraInfo LoadCursorA GetCursorPos ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow SetCapture SetCursor GetClientRect IsWindowUnicode ReleaseCapture SetCursorPos ReleaseDC CloseClipboard

gdi32

GetObjectW GetDIBits DeleteObject

shell32

ShellExecuteA ShellExecuteW SHGetFileInfoW ExtractIconExW

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

Name

.text

Size

486KB

Virtual Size

486KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

166KB

Virtual Size

166KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

22KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

423KB

Virtual Size

423KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

b58480807a3129f06a809e8b1d23afa607ee57bbda94d7013196b591816fa1c0

d3d11

d3dcompiler_47

kernel32

user32

gdi32

shell32

imm32

generic