SummitLoader[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
SummitLoader.exe
Size 3.6MB
Sample261017-j415jazvbw
SHA256 4a1caca08b9019a670fcfab7bc8436ea46fdcc902897587b5f32c93e389bd01f
MD5 42f06d14e197deac09f87af6a171f361
SHA1 382253bee0c4b6666e1f2d9541fa4ddfa708c90c
SHA512 280424692df61b69638734e7b4f3317100a4f03c670d7b63453126f26139ecc646c361253feaa006f053ad1cc545599ee8b1fbc41de8df0224b39842fd1aa2ff
SSDEEP 49152:n2wMZCKE2/pMJ0NfIYzPlDeuuWBqu/nnik099rEQckCNrrV7po:n2CF2/5Am9Dewnri3CNrrJp
TLSH
T16A06CF17E39AC798CD13963AC511AAA3E9F4B809173956CB32C85D19FE17EE04EBC304
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SummitLoader.exe

File Explorer

SummitLoader.exe

.exe 3.6MB

SummitLoader.exe

IMPHASH 5fb13dca16ee88988de28bee8bd8a597
SHA256 4a1caca08b9019a670fcfab7bc8436ea46fdcc902897587b5f32c93e389bd01f
MD5 42f06d14e197deac09f87af6a171f361
SHA1 382253bee0c4b6666e1f2d9541fa4ddfa708c90c
SHA512 280424692df61b69638734e7b4f3317100a4f03c670d7b63453126f26139ecc646c361253feaa006f053ad1cc545599ee8b1fbc41de8df0224b39842fd1aa2ff
SSDEEP 49152:n2wMZCKE2/pMJ0NfIYzPlDeuuWBqu/nnik099rEQckCNrrV7po:n2CF2/5Am9Dewnri3CNrrJp
TLSH
T16A06CF17E39AC798CD13963AC511AAA3E9F4B809173956CB32C85D19FE17EE04EBC304
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1010736

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

d3dcompiler_43

D3DCompile

kernel32

GetModuleHandleExW GetModuleFileNameW GetTempPathW WaitForSingleObject CreateFileW GetModuleHandleA OpenProcess CreateEventW GetTempPathA LoadLibraryA DeleteFileW Module32FirstW GetProcAddress VirtualAllocEx ReadProcessMemory CreateRemoteThread Module32NextW VirtualFreeEx CreateFileMappingW MapViewOfFile GetTickCount FlushFileBuffers WideCharToMultiByte GetSystemFirmwareTable GetVolumeInformationW DeviceIoControl GetEnvironmentVariableW GetModuleFileNameA VirtualProtect GetCurrentProcess DeleteFileA GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetLocaleInfoA QueryPerformanceFrequency FreeLibrary QueryPerformanceCounter CreateFileA AcquireSRWLockExclusive ReleaseSRWLockExclusive InitOnceBeginInitialize InitOnceComplete WakeAllConditionVariable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter Process32FirstW Process32NextW CreateToolhelp32Snapshot CreateDirectoryA GetFileSize WriteProcessMemory SetProcessMitigationPolicy SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead GetFileAttributesA WriteFile ReadFile LocalFree MultiByteToWideChar SetErrorMode SleepConditionVariableSRW CloseHandle GetCurrentThreadId GetCurrentThread GetTickCount64

user32

DispatchMessageW ShowWindow GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent SendMessageW GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect RegisterClassExW UnregisterClassW GetSystemMetrics PostQuitMessage UpdateWindow LoadIconW TranslateMessage SetLayeredWindowAttributes SetWindowDisplayAffinity PeekMessageW CreateWindowExW SetWindowPos IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData MessageBoxA DefWindowProcW GetWindowRect DestroyWindow

advapi32

RegGetValueW

shell32

ShellExecuteW SHGetFolderPathA

ole32

StringFromGUID2

msvcp140

?__ExceptionPtrCurrentException@@YAXPEAX@Z _Mtx_lock _Cnd_register_at_thread_exit _Mtx_unlock _Cnd_broadcast _Xtime_get_ticks _Query_perf_counter ?__ExceptionPtrRethrow@@YAXPEBX@Z _Cnd_wait ?__ExceptionPtrDestroy@@YAXPEAX@Z ?__ExceptionPtrToBool@@YA_NPEBX@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Xbad_function_call@std@@YAXXZ ?_Throw_Cpp_error@std@@YAXH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?__ExceptionPtrAssign@@YAXPEAXPEBX@Z ?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ ?_ReportUnobservedException@details@Concurrency@@YAXXZ ?_Schedule_chore@details@Concurrency@@YAHPEAU_Threadpool_chore@12@@Z ?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QEAAXXZ ?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QEAAX_N@Z ?_Release_chore@details@Concurrency@@YAXPEAU_Threadpool_chore@12@@Z ?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AEAAXXZ ?_Capture@_ContextCallback@details@Concurrency@@AEAAXXZ ?_Reset@_ContextCallback@details@Concurrency@@AEAAXXZ ?_CallInContext@_ContextCallback@details@Concurrency@@QEBAXV?$function@$$A6AXXZ@std@@_N@Z ??0task_continuation_context@Concurrency@@AEAA@XZ _Cnd_unregister_at_thread_exit ?__ExceptionPtrCreate@@YAXPEAX@Z ?__ExceptionPtrCopy@@YAXPEAXPEBX@Z _Query_perf_frequency

crypt32

CryptUnprotectData CertFreeCertificateContext CryptBinaryToStringA CryptStringToBinaryA CryptProtectData CryptEncodeObjectEx

bcrypt

BCryptSetProperty BCryptDecrypt BCryptGetProperty BCryptGenerateSymmetricKey BCryptEncrypt BCryptHash BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider BCryptGenRandom BCryptDestroyKey

ncrypt

NCryptOpenKey NCryptGetProperty NCryptSignHash NCryptExportKey NCryptFinalizeKey NCryptCreatePersistedKey NCryptOpenStorageProvider NCryptSetProperty NCryptFreeObject

iphlpapi

GetAdaptersAddresses

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

dwmapi

DwmExtendFrameIntoClientArea

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException __intrinsic_setjmp __current_exception_context __current_exception memcmp __C_specific_handler __std_exception_destroy __std_exception_copy __std_terminate _purecall strrchr strstr strchr longjmp memcpy memmove memset memchr

api-ms-win-crt-stdio-l1-1-0

ftell fread __stdio_common_vsscanf _wfopen fwrite __stdio_common_vfprintf fflush __acrt_iob_func __stdio_common_vsprintf fclose fopen __stdio_common_vswprintf fseek __p__commode _set_fmode __stdio_common_vsprintf_s

api-ms-win-crt-heap-l1-1-0

_callnewh malloc free _set_new_mode

api-ms-win-crt-runtime-l1-1-0

_invoke_watson _errno _register_thread_local_exe_atexit_callback _c_exit _exit exit _initterm_e _initterm _get_narrow_winmain_command_line _set_app_type _seh_filter_exe terminate _cexit _crt_atexit _register_onexit_function _initialize_onexit_table _initialize_narrow_environment abort _configure_narrow_argv

api-ms-win-crt-string-l1-1-0

iswdigit wcsncpy towlower isalnum strncpy strnlen strcmp wcscpy_s isspace tolower strncmp

api-ms-win-crt-convert-l1-1-0

strtod strtoll strtoull strtol

api-ms-win-crt-math-l1-1-0

__setusermatherr sqrtf _dclass acosf fmodf _dsign powf sinf cosf ceilf

api-ms-win-crt-locale-l1-1-0

localeconv _configthreadlocale

api-ms-win-crt-utility-l1-1-0

qsort