future[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
future.exe
Size 1.3MB
Sample261001-j5devsyakd
SHA256 e9864b8c82e9e1a1d1ae56ca9c0d665dae796c21fe76c311f3a3e60df7badf78
MD5 0529c3ce84228eca11475c78f87f877c
SHA1 9d7686af93b4723033b577fedcfa5956cb39271b
SHA512 6ee0e0e541dac55419712cb5382861648ca545e86c561e2d5a5d982ba7df89c150caa4fdc74ed0162d6ad1a64727eca45f56f8219b4e3abbfc373c48f65895de
SSDEEP 24576:kCvENtnfa7Ys8jORdrnokx3QAHPmUIgi7yycq4P7krS2t:7sNH94noG5fF
TLSH
T17D55BF13F3A682ECD126A438C6A7E327F27678151B2191CB73901956DFA76E09FB7340
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
future.exe

File Explorer

future.exe

.exe 1.3MB

future.exe

IMPHASH ff822db5c575ba37798d81f56a3b0ad2
SHA256 e9864b8c82e9e1a1d1ae56ca9c0d665dae796c21fe76c311f3a3e60df7badf78
MD5 0529c3ce84228eca11475c78f87f877c
SHA1 9d7686af93b4723033b577fedcfa5956cb39271b
SHA512 6ee0e0e541dac55419712cb5382861648ca545e86c561e2d5a5d982ba7df89c150caa4fdc74ed0162d6ad1a64727eca45f56f8219b4e3abbfc373c48f65895de
SSDEEP 24576:kCvENtnfa7Ys8jORdrnokx3QAHPmUIgi7yycq4P7krS2t:7sNH94noG5fF
TLSH
T17D55BF13F3A682ECD126A438C6A7E327F27678151B2191CB73901956DFA76E09FB7340
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

561760

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

dwmapi

DwmExtendFrameIntoClientArea DwmFlush

d3dcompiler_47

D3DCompile

user32

DispatchMessageW PeekMessageW PostQuitMessage ClientToScreen SetCursor SetCursorPos GetClientRect IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState GetMessageExtraInfo TranslateMessage EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard GetWindowThreadProcessId GetKeyboardLayout GetForegroundWindow ScreenToClient GetCursorPos SendInput GetWindow GetTopWindow FindWindowA GetWindowRect GetWindowTextA ShowWindow TrackMouseEvent DefWindowProcW IsWindow SetProcessDPIAware LoadCursorW SetWindowLongW GetWindowLongW UpdateWindow GetSystemMetrics GetAsyncKeyState SetWindowDisplayAffinity SetLayeredWindowAttributes DestroyWindow CreateWindowExW RegisterClassExW UnregisterClassW

gdi32

CreateSolidBrush

kernel32

ReleaseSRWLockExclusive WakeAllConditionVariable GetCurrentThreadId AcquireSRWLockExclusive SleepConditionVariableSRW GetLocaleInfoA FreeLibrary QueryPerformanceFrequency QueryPerformanceCounter MultiByteToWideChar GlobalFree GlobalLock GlobalUnlock GlobalAlloc WideCharToMultiByte SetUnhandledExceptionFilter GetProcAddress GetModuleHandleA VirtualQueryEx VirtualProtectEx GetSystemInfo FlushInstructionCache GetProcessMitigationPolicy SetLastError GetLastError VirtualFreeEx VirtualAllocEx GetTickCount WriteProcessMemory GetFileAttributesW GetModuleHandleW GetFileAttributesA Module32NextW Module32FirstW Process32NextW Process32FirstW CreateToolhelp32Snapshot GetConsoleWindow SetConsoleTitleA GetTickCount64 FindResourceW SizeofResource LockResource LoadResource GetCurrentProcessId GetSystemTimeAsFileTime LoadLibraryA InitializeSListHead CloseHandle Sleep GetExitCodeProcess OpenProcess ReadProcessMemory

ole32

CoCreateInstance CoInitializeEx PropVariantClear CoUninitialize

msvcp140

?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z ?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z ?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z ?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Xout_of_range@std@@YAXPEBD@Z ?_Random_device@std@@YAIXZ ?_Throw_Cpp_error@std@@YAXH@Z ??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z _Cnd_do_broadcast_at_thread_exit ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ _Mtx_unlock _Mtx_lock _Thrd_detach _Query_perf_frequency _Query_perf_counter ?_Xlength_error@std@@YAXPEBD@Z ?uncaught_exception@std@@YA_NXZ ?good@ios_base@std@@QEBA_NXZ ?flags@ios_base@std@@QEBAHXZ ?setf@ios_base@std@@QEAAHHH@Z ?width@ios_base@std@@QEBA_JXZ ?width@ios_base@std@@QEAA_J_J@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ ?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ ?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?_Xbad_function_call@std@@YAXXZ

shlwapi

ord12

mfplat

MFShutdown MFCreateAttributes MFCreateMFByteStreamOnStream MFCreateMediaType MFStartup

mfreadwrite

MFCreateSourceReaderFromURL MFCreateSourceReaderFromByteStream

imm32

ImmGetContext ImmSetCompositionWindow ImmSetCandidateWindow ImmReleaseContext

vcruntime140

__std_exception_destroy _CxxThrowException __std_exception_copy __std_terminate memchr memcmp memcpy memmove memset strstr __C_specific_handler strrchr __current_exception __current_exception_context

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-heap-l1-1-0

free _callnewh malloc _set_new_mode

api-ms-win-crt-string-l1-1-0

strcmp strncpy wcslen strlen tolower _wcsicmp strncmp strcpy_s

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf ftell __stdio_common_vfprintf __acrt_iob_func _wfopen fclose fflush fread _set_fmode fwrite __p__commode fseek __stdio_common_vsscanf

api-ms-win-crt-math-l1-1-0

sinf __setusermatherr acosf tanf expf powf sqrtf pow logf log atan2f roundf fmodf lroundf ceilf cosf

api-ms-win-crt-runtime-l1-1-0

terminate _beginthreadex _register_thread_local_exe_atexit_callback _c_exit __p___argv __p___argc _exit exit _initterm_e _initterm _get_initial_narrow_environment _set_app_type _seh_filter_exe _cexit _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _register_onexit_function _crt_atexit

api-ms-win-crt-convert-l1-1-0

atof strtoull

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-locale-l1-1-0

_configthreadlocale