OpenCode-Infinite[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
OpenCode-Infinite.exe
Size 967KB
Sample261107-18d91ass7j
SHA256 aca58b1ef0154fdc8e5198916b9d022bfe892825d6edae6ac5608c91af6f584f
MD5 82dedaa3d73b17aed031626751ca1cdb
SHA1 92140bf242faeb388aed10b06dc31690fcccf3ab
SHA512 9c6cb77e4ac2ddb8dc3b052e3a5a7df15563e620e12fc4a6a5ff6b71e8e9fe0df247e6a633c843f38501c176be2cbef7602dd9f32475516761212e14c9205dc7
SSDEEP 24576:saGhNBmnIWleGXgP6uiWtiZPEf3Tt52cfniGfns+1V:saGhNBmIWletTiZsh6Gfnn
TLSH
T1CE258D1CE1D401F8C0AAD1B4CE879527E772748D43358EEF17E5AA641F636F0DABAA10
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OpenCode-Infinite.exe

File Explorer

OpenCode-Infinite.exe

.exe 967KB

OpenCode-Infinite.exe

IMPHASH dd571cf7bd73419fdf2f2951bc5a9cc3
SHA256 aca58b1ef0154fdc8e5198916b9d022bfe892825d6edae6ac5608c91af6f584f
MD5 82dedaa3d73b17aed031626751ca1cdb
SHA1 92140bf242faeb388aed10b06dc31690fcccf3ab
SHA512 9c6cb77e4ac2ddb8dc3b052e3a5a7df15563e620e12fc4a6a5ff6b71e8e9fe0df247e6a633c843f38501c176be2cbef7602dd9f32475516761212e14c9205dc7
SSDEEP 24576:saGhNBmnIWleGXgP6uiWtiZPEf3Tt52cfniGfns+1V:saGhNBmIWletTiZsh6Gfnn
TLSH
T1CE258D1CE1D401F8C0AAD1B4CE879527E772748D43358EEF17E5AA641F636F0DABAA10
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

733168

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Jeko\Documents\opencode-gitlab\C++\bin\Release\OpenCodeInfinite.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

winhttp

WinHttpOpenRequest WinHttpSetTimeouts WinHttpSendRequest WinHttpReceiveResponse WinHttpCloseHandle WinHttpSetOption WinHttpQueryDataAvailable WinHttpOpen WinHttpQueryHeaders WinHttpReadData WinHttpConnect

kernel32

ReadFile GetCurrentProcess WriteFile CreateFileW Sleep GetTickCount64 LocalFree CreateMutexW WaitForSingleObject OpenProcess QueryFullProcessImageNameW SearchPathW SetHandleInformation GetStdHandle TerminateProcess GetProcessId CreatePipe FreeEnvironmentStringsW CreateToolhelp32Snapshot Process32NextW Process32FirstW CreateProcessA GetEnvironmentStringsW GetExitCodeProcess CreateDirectoryW GetFileSizeEx RemoveDirectoryW GetUserDefaultLocaleName GetEnvironmentVariableW GetTempPathW GetFileAttributesW MultiByteToWideChar GetFileAttributesExW DeleteFileW FindNextFileW SetFilePointerEx CloseHandle WideCharToMultiByte MoveFileW GlobalAlloc GlobalFree GlobalLock GlobalUnlock GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GetFileAttributesExA GetLocaleInfoEx FormatMessageA GetCurrentThreadId SleepConditionVariableSRW AcquireSRWLockExclusive ReleaseSRWLockExclusive GetFileInformationByHandleEx WakeAllConditionVariable SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead CreateProcessW DeleteFileA GetFileAttributesA GetLastError CopyFileW FindFirstFileW FindFirstFileExW SetFileInformationByHandle CreateFile2 FindClose GetModuleHandleW

user32

RegisterClassExW ShowWindow GetKeyState GetMessageExtraInfo LoadCursorA GetCapture ClientToScreen UnregisterClassW GetKeyboardLayout GetForegroundWindow SetCapture SetCursor IsWindowUnicode ReleaseCapture SetCursorPos GetCursorPos OpenClipboard CloseClipboard TrackMouseEvent GetMonitorInfoW TranslateMessage LoadIconW GetClientRect IsZoomed CreateWindowExW MonitorFromWindow PeekMessageA PostQuitMessage SystemParametersInfoW UpdateWindow ReleaseDC GetDpiForWindow SendMessageTimeoutW MessageBoxW SetWindowPos GetDC CharLowerBuffW DestroyWindow DispatchMessageA SetProcessDpiAwarenessContext EmptyClipboard GetClipboardData SetClipboardData PostMessageW DefWindowProcW ScreenToClient

gdi32

GetDeviceCaps

advapi32

GetTokenInformation FreeSid CheckTokenMembership ConvertSidToStringSidA OpenProcessToken RegQueryValueExW RegOpenKeyExW RegSetValueExW RegCloseKey AllocateAndInitializeSid

shell32

ShellExecuteA SHGetKnownFolderPath ShellExecuteExW

ole32

CoTaskMemFree

msvcp140

?id@?$ctype@D@std@@2V0locale@2@A ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z _Strxfrm ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?tolower@?$ctype@D@std@@QEBADD@Z ?id@?$collate@D@std@@2V0locale@2@A ??0facet@locale@std@@IEAA@_K@Z ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ ??1_Locinfo@std@@QEAA@XZ ??0_Locinfo@std@@QEAA@PEBD@Z __crtLCMapStringA ??1facet@locale@std@@MEAA@XZ _Strcoll ?always_noconv@codecvt_base@std@@QEBA_NXZ ??7ios_base@std@@QEBA_NXZ ?good@ios_base@std@@QEBA_NXZ _Cnd_signal _Query_perf_frequency ?_Throw_Cpp_error@std@@YAXH@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xbad_function_call@std@@YAXXZ ?_Xlength_error@std@@YAXPEBD@Z _Mtx_lock _Cnd_do_broadcast_at_thread_exit _Cnd_wait _Thrd_id _Query_perf_counter _Thrd_detach _Thrd_join _Mtx_unlock _Cnd_broadcast ?_Xbad_alloc@std@@YAXXZ ?_Winerror_map@std@@YAHH@Z ?_Syserror_map@std@@YAPEBDH@Z ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?uncaught_exception@std@@YA_NXZ ?_Id_cnt@id@locale@std@@0HA ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z

ws2_32

listen setsockopt __WSAFDIsSet bind closesocket select send recv inet_pton getaddrinfo WSAStartup accept WSAGetLastError socket connect getsockopt inet_ntop htons freeaddrinfo ioctlsocket

crypt32

CryptUnprotectData CryptProtectData

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

bcrypt

BCryptGetProperty BCryptOpenAlgorithmProvider BCryptFinishHash BCryptDestroyHash BCryptHashData BCryptCreateHash BCryptCloseAlgorithmProvider

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception strchr __std_type_info_compare __std_terminate _CxxThrowException __C_specific_handler __current_exception_context __std_exception_copy __std_exception_destroy strstr memset memmove memcpy memcmp memchr __RTtypeid

api-ms-win-crt-time-l1-1-0

_localtime64 strftime _localtime64_s _gmtime64_s _time64

api-ms-win-crt-string-l1-1-0

isspace isdigit tolower toupper isalnum strcmp wcslen strncmp strncpy strlen

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _crt_atexit _cexit _seh_filter_exe _set_app_type _configure_wide_argv _initialize_wide_environment _get_wide_winmain_command_line _initterm _initterm_e exit abort _c_exit _register_thread_local_exe_atexit_callback terminate _beginthreadex _exit

api-ms-win-crt-convert-l1-1-0

atoll strtod atof atoi strtoul

api-ms-win-crt-stdio-l1-1-0

_set_fmode setvbuf __stdio_common_vsscanf _wfopen fwrite fgetc __stdio_common_vfprintf fseek fclose fflush fputc __acrt_iob_func __stdio_common_vsprintf_s ftell __stdio_common_vsprintf __stdio_common_vsnprintf_s _get_stream_buffer_pointers _fseeki64 fread fsetpos ungetc fgetpos __p__commode

api-ms-win-crt-heap-l1-1-0

malloc _set_new_mode _callnewh realloc free

api-ms-win-crt-filesystem-l1-1-0

_unlock_file _lock_file

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-locale-l1-1-0

___lc_locale_name_func _configthreadlocale ___lc_collate_cp_func

api-ms-win-crt-math-l1-1-0

acosf sinf ceilf logf cosf sqrtf powf fmodf __setusermatherr