ByteStrap-v0[.]2[.]4-win-x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
ByteStrap-v0.2.4-win-x64.exe
Size 17.1MB
Sample261107-r7ygtayzhy
SHA256 2b145cc269d867859e10904b68ac1953828d4e3bb2fc71a4472808da4f775586
MD5 d66fe1ee9c6b59c69f3947ef8c3ac1bb
SHA1 93700e153d33ec051d0d577337488a1110458c3a
SHA512 a3ca10868dcc21bb4e3bb2ad31f7359f83616dfea260efbac1cc56a3f3bf2b135bd2c1b101750999e8864cc4209091d9babe94758f1b1c73dc45e42535365ce3
SSDEEP 98304:lJ5knPirnSolNgbJns8XTq7TS9KnmZqfYe2KCStwqbWy0YpNzyH8CZbDA5bJii+m:xNVTEssurgqfXCSR3rzy3ZbDA3iiW
TLSH
T1E1078D42B69A95EED15AC870834696736A3134CB1B26B9FB42D495383F7ABF01F3C344
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ByteStrap-v0.2.4-win-x64.exe

File Explorer

ByteStrap-v0.2.4-win-x64.exe

.exe 17.1MB

ByteStrap-v0.2.4-win-x64.exe

IMPHASH 01628aefd00102198e495edd756fd646
SHA256 2b145cc269d867859e10904b68ac1953828d4e3bb2fc71a4472808da4f775586
MD5 d66fe1ee9c6b59c69f3947ef8c3ac1bb
SHA1 93700e153d33ec051d0d577337488a1110458c3a
SHA512 a3ca10868dcc21bb4e3bb2ad31f7359f83616dfea260efbac1cc56a3f3bf2b135bd2c1b101750999e8864cc4209091d9babe94758f1b1c73dc45e42535365ce3
SSDEEP 98304:lJ5knPirnSolNgbJns8XTq7TS9KnmZqfYe2KCStwqbWy0YpNzyH8CZbDA5bJii+m:xNVTEssurgqfXCSR3rzy3ZbDA3iiW
TLSH
T1E1078D42B69A95EED15AC870834696736A3134CB1B26B9FB42D495383F7ABF01F3C344
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10784080

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

bytestrap.pdb

bcryptprimitives

ProcessPrng

kernel32

GetSystemTimeAsFileTime GlobalUnlock FindClose GetCurrentProcessId CreateThread InitializeSListHead SwitchToThread SetFileInformationByHandle SetFilePointerEx CreateFileW SetNamedPipeHandleState GlobalSize GetCurrentThreadId HeapReAlloc LocaleNameToLCID GlobalAlloc QueryPerformanceFrequency GetConsoleOutputCP GetConsoleMode VirtualProtect CreateFileMappingW MapViewOfFile GetCurrentProcess UnmapViewOfFile ReadFile GetOverlappedResult WriteFile PostQueuedCompletionStatus CreateIoCompletionPort CancelIoEx WriteConsoleW GetEnvironmentVariableW GetCommandLineW GetCurrentDirectoryW GetQueuedCompletionStatusEx AddVectoredExceptionHandler SetFileCompletionNotificationModes GetWindowsDirectoryW GetSystemDirectoryW FreeEnvironmentStringsW GetEnvironmentStringsW RtlVirtualUnwind lstrlenW RtlLookupFunctionEntry CloseHandle FormatMessageW HeapAlloc HeapFree GetProcessHeap RtlCaptureContext MultiByteToWideChar GlobalFree GetCurrentThread LoadLibraryW DuplicateHandle SleepEx ReadFileEx WriteFileEx QueryPerformanceCounter WaitForSingleObject GetFullPathNameW GetStdHandle CopyFileExW GetModuleHandleExW CreateEventW GetSystemInfo GetModuleHandleA CompareStringOrdinal SetFileTime GetFileInformationByHandle GetFileInformationByHandleEx CreateProcessW WaitForMultipleObjects GetExitCodeProcess CreateDirectoryW SetThreadStackGuarantee RemoveDirectoryW SetFileAttributesW MoveFileExW FindFirstFileExW ExitProcess WaitForSingleObjectEx CreateMutexA ReleaseMutex GetFinalPathNameByHandleW CreateSymbolicLinkW SetLastError DeleteFileW DeviceIoControl CreateWaitableTimerExW SetWaitableTimer GetFileAttributesW FlsFree FlsAlloc IsThreadAFiber FlsSetValue GetUserDefaultUILanguage GetTempPathW WideCharToMultiByte CancelIo FindNextFileW SetHandleInformation GlobalLock LoadLibraryA InitializeSRWLock ReleaseSRWLockExclusive ReleaseSRWLockShared AcquireSRWLockExclusive AcquireSRWLockShared InitOnceExecuteOnce TlsAlloc TlsGetValue TlsSetValue GetModuleFileNameW FreeLibrary LoadLibraryExW GetModuleHandleW SetThreadErrorMode GetUserPreferredUILanguages GetSystemTimePreciseAsFileTime GetProcAddress GetLastError LoadLibraryExA Sleep SetUnhandledExceptionFilter

shlwapi

AssocQueryStringW

oleaut32

SafeArrayPutElement SetErrorInfo SafeArrayCreateVector VariantClear GetErrorInfo SysFreeString SysStringLen SysAllocStringLen

uiautomationcore

UiaGetReservedNotSupportedValue UiaGetReservedMixedAttributeValue UiaLookupId UiaRaiseAutomationEvent UiaRaiseAutomationPropertyChangedEvent UiaHostProviderFromHwnd UiaReturnRawElementProvider

user32

CloseTouchInputHandle GetTouchInputInfo CallWindowProcW RegisterTouchWindow CloseClipboard OpenClipboard CreateIconIndirect CreateIcon AdjustWindowRectEx GetWindowLongW SetWindowLongW EnableMenuItem GetSystemMenu ShowWindow DestroyIcon DestroyCursor ShowCursor ClipCursor GetClipCursor IsClipboardFormatAvailable GetKeyboardLayout ToUnicodeEx MsgWaitForMultipleObjectsEx RegisterWindowMessageA ReleaseCapture SetWindowDisplayAffinity GetPropW SetWindowLongPtrW GetWindowTextW GetWindowTextLengthW GetCursorPos ScreenToClient TrackMouseEvent SetCapture MonitorFromRect GetMenu EmptyClipboard ValidateRect GetRawInputData GetKeyState GetAsyncKeyState GetKeyboardState MapVirtualKeyExW SetPropW ClientToScreen DefWindowProcW RegisterClipboardFormatW IsProcessDPIAware GetClipboardData SetClipboardData CreateWindowExW RegisterClassExW GetClassInfoExW GetClassNameW GetDC SetWindowPlacement GetWindowPlacement ChangeDisplaySettingsExW FlashWindowEx SetCursor LoadCursorW SetForegroundWindow SendInput MapVirtualKeyW GetForegroundWindow SetCursorPos SetWindowTextW MonitorFromWindow GetWindowRect InvalidateRgn SetWindowPos CreateIconFromResourceEx SendMessageW GetSystemMetrics GetActiveWindow IsIconic RegisterRawInputDevices DispatchMessageW TranslateMessage PeekMessageW DestroyWindow RedrawWindow GetMonitorInfoW MonitorFromPoint EnumDisplayMonitors GetWindowLongPtrW IsWindowVisible GetClientRect SystemParametersInfoA PostMessageW ReleaseDC RemovePropW

gdi32

SetPixelFormat CreateCompatibleBitmap SwapBuffers SetBitmapBits CreateBitmap CreateRectRgn GetDeviceCaps ChoosePixelFormat DescribePixelFormat DeleteObject

combase

CoCreateFreeThreadedMarshaler CoTaskMemFree

dwrite

DWriteCreateFactory

ntdll

NtCancelIoFileEx RtlNtStatusToDosError NtCreateFile NtReadFile NtWriteFile NtDeviceIoControlFile NtCreateNamedPipeFile NtOpenFile

ole32

CoCreateInstance RevokeDragDrop CoInitializeEx OleInitialize RegisterDragDrop CoUninitialize

api-ms-win-core-winrt-error-l1-1-0

RoOriginateErrorW

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

advapi32

RegDeleteTreeW RegQueryValueExW RegCreateKeyExW ImpersonateAnonymousToken RegCloseKey RegOpenKeyExW RegSetValueExW RevertToSelf

shell32

DragFinish DragQueryFileW SHCreateItemFromParsingName SHGetKnownFolderPath

dwmapi

DwmSetWindowAttribute DwmEnableBlurBehindWindow

ws2_32

ioctlsocket WSASocketW bind closesocket setsockopt WSAIoctl WSAGetLastError recv WSASend send getsockopt shutdown connect getaddrinfo getsockname getpeername WSAStartup freeaddrinfo

crypt32

CertFreeCertificateChainEngine CertCreateCertificateChainEngine CertCloseStore CertVerifyCertificateChainPolicy CertGetCertificateChain CertFreeCertificateContext CertAddEncodedCertificateToStore CertOpenStore CertSetCertificateContextProperty CertFreeCertificateChain

opengl32

wglMakeCurrent wglDeleteContext wglGetCurrentContext wglGetProcAddress wglCreateContext wglShareLists wglGetCurrentDC

imm32

ImmReleaseContext ImmAssociateContextEx ImmGetContext ImmSetCompositionWindow ImmSetCandidateWindow ImmGetCompositionStringW

uxtheme

SetWindowTheme

vcruntime140

memchr memset memmove _CxxThrowException __current_exception_context __current_exception strchr __C_specific_handler memcmp __CxxFrameHandler3 memcpy

api-ms-win-crt-string-l1-1-0

strcmp wcslen strlen

api-ms-win-crt-math-l1-1-0

fmod truncf trunc exp2f log2 log _hypot floor powf fma cbrt tanf sin __setusermatherr cos sinf floorf cosf roundf tan pow round _hypotf expf cbrtf ceil atan2f ceilf atan2 log10

api-ms-win-crt-runtime-l1-1-0

_errno _initialize_onexit_table _set_app_type terminate _crt_atexit _wassert _register_thread_local_exe_atexit_callback _c_exit _cexit __p___argv strerror __p___argc _exit exit _initterm_e _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _register_onexit_function _seh_filter_exe abort

api-ms-win-crt-heap-l1-1-0

realloc free _set_new_mode malloc

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-stdio-l1-1-0

fwrite fgets fseek fread _fileno fopen ferror __acrt_iob_func feof _set_fmode fflush fclose __stdio_common_vfprintf __stdio_common_vsprintf __stdio_common_vsscanf __p__commode _setmode ftell

api-ms-win-crt-utility-l1-1-0

bsearch

api-ms-win-crt-locale-l1-1-0

_configthreadlocale