cli-stressor-cuda-rs-v0[.]2[.]0-alpha[.]1-windows-amd64[.]exe

General

Target
cli-stressor-cuda-rs-v0.2.0-alpha.1-windows-amd64.exe
Size 1.4MB
Sample261030-mv5cdacy3l
SHA256 9f176cd6124adc58357ea78029236ed2b8c41b6ea7e57f87639657a2d0e9fdea
MD5 52c6760ef123be177eae1e37f9447b33
SHA1 ae716b7c53edcd54163ee1d1bcd9311ed461473d
SHA512 ff7401d29fa17b0657efd7da0f188fa358d8912f6b507503546e12f49766960d25d71e98b5c73436a5f1be3e3649c17ecf993ecec408a886b0d2116e664dc43d
SSDEEP 24576:U8cSkwr95feO5zY3f/T40gYNn0NHl/vSR0G/+:Pkwr95RzYv/T5x0n6OG/
TLSH
T1D2652903E66290EDC479C175D3597232FA35BC4D07317AEB8BA04A352E66FD0AA3CB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cli-stressor-cuda-rs-v0.2.0-alpha.1-windows-amd64.exe

File Explorer

cli-stressor-cuda-rs-v0.2.0-alpha.1-windows-amd64.exe

.exe 1.4MB

cli-stressor-cuda-rs-v0.2.0-alpha.1-windows-amd64.exe

IMPHASH 84cea852c89e7e582595581899f97371
SHA256 9f176cd6124adc58357ea78029236ed2b8c41b6ea7e57f87639657a2d0e9fdea
MD5 52c6760ef123be177eae1e37f9447b33
SHA1 ae716b7c53edcd54163ee1d1bcd9311ed461473d
SHA512 ff7401d29fa17b0657efd7da0f188fa358d8912f6b507503546e12f49766960d25d71e98b5c73436a5f1be3e3649c17ecf993ecec408a886b0d2116e664dc43d
SSDEEP 24576:U8cSkwr95feO5zY3f/T40gYNn0NHl/vSR0G/+:Pkwr95RzYv/T5x0n6OG/
TLSH
T1D2652903E66290EDC479C175D3597232FA35BC4D07317AEB8BA04A352E66FD0AA3CB51
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

1041248

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

cli_stressor_cuda_rs.pdb

kernel32

FindNextFileW FindFirstFileExW FindClose GetModuleHandleExW GetProcAddress SetThreadErrorMode FlushFileBuffers SetFilePointerEx LoadLibraryExW GetFileInformationByHandle GetFullPathNameW GetFileInformationByHandleEx GetFileType GetConsoleOutputCP WriteConsoleW SetLastError FreeLibrary CloseHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo SetConsoleMode GetConsoleMode GetStdHandle SetStdHandle GetModuleFileNameW GetLastError RtlCaptureContext HeapSize LCMapStringW CompareStringW VirtualProtect GetStringTypeW SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCPInfo GetOEMCP GetACP IsValidCodePage UnhandledExceptionFilter IsDebuggerPresent IsProcessorFeaturePresent GetCommandLineA TerminateProcess WriteFile GetProcessHeap HeapFree HeapReAlloc SwitchToThread WaitForSingleObject CreateThread GetSystemInfo GetCurrentThreadId QueryPerformanceFrequency QueryPerformanceCounter AddVectoredExceptionHandler SetThreadStackGuarantee GetCurrentThread GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW lstrlenW ExitProcess GetCurrentProcess WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA GetCurrentProcessId CreateMutexA ReleaseMutex HeapAlloc MultiByteToWideChar CreateWaitableTimerExW SetWaitableTimer Sleep GetModuleHandleW FormatMessageW GetModuleHandleA CreateFileW RtlLookupFunctionEntry RtlVirtualUnwind RtlPcToFileHeader DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection RaiseException EncodePointer FlsFree FlsSetValue FlsGetValue FlsAlloc RtlUnwindEx GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW

bcryptprimitives

ProcessPrng

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

251KB

Virtual Size

250KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

26KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

cli-stressor-cuda-rs-v0.2.0-alpha.1-windows-amd64.exe

kernel32

bcryptprimitives

ntdll

api-ms-win-core-synch-l1-2-0

generic