RustPEP_0[.]1[.]0_x64-portable[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
RustPEP_0.1.0_x64-portable.zip
Size 3.3MB
Sample261011-cl33vatzbs
SHA256 5a23762f2dbd58e501be2919755c48c98efe09e40def98fd9810e594e10c6931
MD5 46ddb7e5de2d56c7b98d0c61de99f852
SHA1 be85beaff5979a73c25b31328be669539be15f6b
SHA512 364a3cdae7aa1bf82db9198008f5a80a16da7edd69aabd5b287f02efeb517d5bd914be977b0fff3e8d156b4b8e7fae4ed6281c2fd9788069636733610fb11aec
SSDEEP 98304:mKPzYz+1Iz6mUmu8Uut50jge6RlkUpE5qr+AAoB+UeC:mKOeIz6UptageulkCfrJZ
TLSH
T1ADF533F186B01541E4E7500B7D4A26AD3CC83E7BB6BC5328A277F2914FB23A72587E11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/RustPEP.exe

File Explorer

RustPEP_0.1.0_x64-portable.zip

.zip 3.3MB
README.md

2KB
RustPEP.exe

.exe 10.9MB

RustPEP_0.1.0_x64-portable.zip

SHA256 5a23762f2dbd58e501be2919755c48c98efe09e40def98fd9810e594e10c6931
MD5 46ddb7e5de2d56c7b98d0c61de99f852
SHA1 be85beaff5979a73c25b31328be669539be15f6b
SHA512 364a3cdae7aa1bf82db9198008f5a80a16da7edd69aabd5b287f02efeb517d5bd914be977b0fff3e8d156b4b8e7fae4ed6281c2fd9788069636733610fb11aec
SSDEEP 98304:mKPzYz+1Iz6mUmu8Uut50jge6RlkUpE5qr+AAoB+UeC:mKOeIz6UptageulkCfrJZ
TLSH
T1ADF533F186B01541E4E7500B7D4A26AD3CC83E7BB6BC5328A277F2914FB23A72587E11
MD5 SHA1 SHA512 SSDEEP TLSH

RustPEP.exe

IMPHASH 101578d5fcb63309e8f8753971e68bb2
SHA256 9c09c83a4433e055fc4d31e0452b74149c8ae1789ec765faf388395f38133499
MD5 a1a18c3119454323a6d11365350245d5
SHA1 851873311a7dff498f2c53a73acf88b3c0b5b068
SHA512 b00645f25355e8e285efd3963285dff9b7e0fdf6d7f91db46c7a552a6317c4ee76d69ba07e24a3a371b1d4042bd2cd8285729c0090bb9598bdfb3fe2310fa18d
SSDEEP 98304:qc/45R3FxGwiJ/T2YEanrsktZNEG88s88no:gxSZZNo
TLSH
T139B61A11761B94A8E02BC8B0820665674F2930DF1EB779FF35CC463C3F79BA49B29664
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6882112

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

rustpep.pdb

bcryptprimitives

ProcessPrng

ntdll

RtlGetVersion NtOpenFile NtCreateNamedPipeFile RtlNtStatusToDosError NtWriteFile NtReadFile

kernel32

RtlUnwindEx SetUnhandledExceptionFilter UnhandledExceptionFilter InitializeSListHead SetLastError TlsFree TlsSetValue TlsGetValue TlsAlloc EncodePointer RaiseException GetUserDefaultUILanguage LCIDToLocaleName RtlPcToFileHeader TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetSystemTimeAsFileTime SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GetLastError CloseHandle Sleep GetProcAddress GetModuleHandleA GetProcessHeap HeapFree SetThreadStackGuarantee GetCurrentThread HeapReAlloc SetWaitableTimer WaitForSingleObject lstrlenW SwitchToThread LoadLibraryA LoadLibraryW GetCommandLineW CreateProcessW FreeEnvironmentStringsW GetEnvironmentStringsW CreateDirectoryW RtlLookupFunctionEntry WaitForSingleObjectEx GetCurrentProcess GetCurrentProcessId WideCharToMultiByte ReleaseMutex FormatMessageW MultiByteToWideChar FlsAlloc GetModuleHandleExW IsThreadAFiber FlsSetValue FlsFree HeapAlloc CreateFileW SleepEx ExitProcess CompareStringOrdinal GetSystemDirectoryW GetWindowsDirectoryW GetModuleFileNameW DuplicateHandle QueryPerformanceFrequency WriteFileEx ReadFileEx GetEnvironmentVariableW CreateMutexA GetCurrentDirectoryW RtlVirtualUnwind RtlCaptureContext SetEnvironmentVariableW CreateWaitableTimerExW QueryPerformanceCounter AddVectoredExceptionHandler CreateThread GetFinalPathNameByHandleW GetTempPathW GetFileAttributesW GetFileInformationByHandleEx GetFileInformationByHandle SetFileInformationByHandle SetFileTime GetFullPathNameW WriteConsoleW GetConsoleOutputCP GetConsoleMode GetStdHandle FindClose FindNextFileW FindFirstFileExW InitializeCriticalSectionAndSpinCount GetModuleHandleW DeleteCriticalSection GetCurrentThreadId GetSystemInfo FreeLibrary LoadLibraryExW OutputDebugStringW OutputDebugStringA GetSystemTimePreciseAsFileTime LoadLibraryExA

api-ms-win-core-synch-l1-2-0

WakeByAddressSingle WaitOnAddress WakeByAddressAll

shell32

SHGetStockIconInfo ShellExecuteW SHGetKnownFolderPath SHAppBarMessage DragFinish SHCreateItemFromParsingName DragQueryFileW

combase

CoCreateFreeThreadedMarshaler CoTaskMemAlloc CoTaskMemFree

user32

LoadCursorW GetWindowLongPtrW ClipCursor GetClipCursor ShowCursor SetWindowLongW GetSystemMenu RedrawWindow SetPropW SetWindowTextW GetWindowTextW GetWindowTextLengthW RegisterWindowMessageA LoadImageW MonitorFromPoint GetMenu ToUnicodeEx GetKeyboardLayout GetIconInfo MapVirtualKeyExW GetKeyState GetAsyncKeyState GetKeyboardState EnumDisplayMonitors GetUpdateRect ValidateRect GetRawInputData SystemParametersInfoW DestroyWindow SetCursor RegisterRawInputDevices CreateIcon PostThreadMessageW FindWindowExW MsgWaitForMultipleObjectsEx GetParent DrawTextW FillRect GetWindowDC OffsetRect GetWindowRect MapWindowPoints GetClientRect GetMenuBarInfo PeekMessageW CloseTouchInputHandle TranslateAcceleratorW CreateMenu DestroyMenu RemoveMenu SetMenu GetMenuItemInfoW EnableMenuItem CreateAcceleratorTableW DestroyIcon GetSystemMetrics DrawIconEx ReleaseDC SetMenuItemInfoW AppendMenuW InsertMenuW DestroyAcceleratorTable IsProcessDPIAware GetDC MonitorFromWindow TrackPopupMenu SetForegroundWindow ClientToScreen GetCursorPos DrawMenuBar CheckMenuItem SendMessageW SendInput ShowWindow PostQuitMessage SystemParametersInfoA PostMessageW GetActiveWindow VkKeyScanW GetTouchInputInfo SetWindowRgn IsWindowVisible IsIconic TrackMouseEvent SetCapture ReleaseCapture GetWindowLongW ScreenToClient GetMessageW TranslateMessage RegisterTouchWindow SetWindowDisplayAffinity DefWindowProcW EnableWindow DispatchMessageW SetParent AdjustWindowRectEx IsWindowEnabled GetWindowPlacement SetWindowPlacement GetMonitorInfoW ChangeDisplaySettingsExW CreatePopupMenu SetFocus GetWindow EnumChildWindows DispatchMessageA GetMessageA SetWindowLongPtrW CreateWindowExW RegisterClassExW AdjustWindowRect UpdateWindow InvalidateRect SetCursorPos MapVirtualKeyW GetForegroundWindow InvalidateRgn SetWindowPos MonitorFromRect FlashWindowEx

comctl32

SetWindowSubclass DefSubclassProc TaskDialogIndirect RemoveWindowSubclass

gdi32

GetDeviceCaps CreateRectRgn DeleteObject CreateDIBSection SelectObject BitBlt CombineRgn DeleteDC CreateSolidBrush GetDIBits SetBkMode CreateCompatibleDC SetTextColor

ole32

RevokeDragDrop OleInitialize CoInitializeEx CoCreateInstance CoUninitialize RegisterDragDrop

oleaut32

SetErrorInfo SysStringLen SysFreeString GetErrorInfo

dwmapi

DwmSetWindowAttribute DwmGetWindowAttribute DwmEnableBlurBehindWindow

shlwapi

SHCreateMemStream

imm32

ImmGetContext ImmReleaseContext ImmGetCompositionStringW

advapi32

EventWriteTransfer RegQueryValueExW RegCloseKey EventRegister EventSetInformation RegGetValueW RegOpenKeyExW EventUnregister

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

api-ms-win-crt-math-l1-1-0

ceil pow trunc roundf round log10 floor exp __setusermatherr log

api-ms-win-crt-string-l1-1-0

strcpy_s wcslen wcsncmp _wcsicmp strcmp strlen wcscmp

api-ms-win-crt-convert-l1-1-0

_wtoi wcstol _ultow_s

api-ms-win-crt-runtime-l1-1-0

__p___argc _c_exit _cexit _exit _register_thread_local_exe_atexit_callback exit abort _initterm_e _initialize_onexit_table _initterm _register_onexit_function _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv terminate _set_app_type _seh_filter_exe _crt_atexit __p___argv

api-ms-win-crt-stdio-l1-1-0

__p__commode _set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free calloc _set_new_mode malloc _callnewh