intellectfucks[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
intellectfucks.exe
Size 56.0MB
Sample261102-gcnc9ae151
SHA256 807a27d025b724973e04d554d9964d6ead550616cfb6f2adcc403e8750fa1aaa
MD5 631a4bd9fcde0b7a6be65c6e177ae92f
SHA1 c7c59f4c4eaaf910dc5256386abc8957f92fb840
SHA512 5e4c9b25b23e2630ea3101165176893e071d9739acd3c88a7da9e6dc5791927d8fdc898ee59e2ca29a1516c6d2d5608f4d5ea7c72816685a42ed681445a7e8c5
SSDEEP 1572864:4unD/VIfowYJnldc9a6EIhZKsetLA26qyBO7uoCq:4mgNNI6EIfytLiqy07uo
TLSH
T1DFD73393209EC6F1E1B3F331C04FD396E73AC1F82A756B8496E4C94B6582B6D9D35848
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
intellectfucks.exe

File Explorer

intellectfucks.exe

.exe 56.0MB

intellectfucks.exe

IMPHASH 1a8190a5639476a0ab80cade0a559a29
SHA256 807a27d025b724973e04d554d9964d6ead550616cfb6f2adcc403e8750fa1aaa
MD5 631a4bd9fcde0b7a6be65c6e177ae92f
SHA1 c7c59f4c4eaaf910dc5256386abc8957f92fb840
SHA512 5e4c9b25b23e2630ea3101165176893e071d9739acd3c88a7da9e6dc5791927d8fdc898ee59e2ca29a1516c6d2d5608f4d5ea7c72816685a42ed681445a7e8c5
SSDEEP 1572864:4unD/VIfowYJnldc9a6EIhZKsetLA26qyBO7uoCq:4mgNNI6EIfytLiqy07uo
TLSH
T1DFD73393209EC6F1E1B3F331C04FD396E73AC1F82A756B8496E4C94B6582B6D9D35848
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10008

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bcrypt

BCryptGetProperty BCryptSetProperty BCryptCloseAlgorithmProvider BCryptGenerateSymmetricKey BCryptOpenAlgorithmProvider BCryptDestroyKey BCryptDecrypt

mscoree

CLRCreateInstance

ole32

CoInitializeEx

oleaut32

SysAllocString SysFreeString SafeArrayCreate VariantInit SafeArrayPutElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayGetDim SafeArrayDestroy

shell32

CommandLineToArgvW

kernel32

GetStartupInfoW WriteConsoleW CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapReAlloc HeapSize LCMapStringW GetStringTypeW GetFileType SetStdHandle FreeEnvironmentStringsW GetCommandLineW SetCurrentDirectoryW CloseHandle HeapAlloc HeapFree GetProcessHeap Sleep ExitProcess CreateThread GetSystemInfo VirtualAlloc VirtualProtect VirtualFree VirtualQuery GetModuleFileNameW GetModuleHandleA GetModuleHandleW GetProcAddress LoadResource LockResource SizeofResource LoadLibraryA LocalFree FindResourceA GetLastError RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetEnvironmentStringsW WideCharToMultiByte MultiByteToWideChar GetCommandLineA GetCPInfo GetOEMCP RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleHandleExW FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP