DirectInput8Create
Overview
overview
3Static
static
3ModEngine-...84.zip
windows7-x64
1ModEngine-...84.zip
windows10-2004-x64
1ModEngine-...t8.dll
windows7-x64
1ModEngine-...t8.dll
windows10-2004-x64
1ModEngine-...ne.ini
windows7-x64
1ModEngine-...ne.ini
windows10-2004-x64
1ModEngine-...me.txt
windows7-x64
1ModEngine-...me.txt
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
ModEngine-0.1.16-6-0-1-16-1605858484.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ModEngine-0.1.16-6-0-1-16-1605858484.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
ModEngine-0.1.16/dinput8.dll
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
ModEngine-0.1.16/dinput8.dll
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
ModEngine-0.1.16/modengine.ini
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
ModEngine-0.1.16/modengine.ini
Resource
win10v2004-20230221-en
Behavioral task
behavioral7
Sample
ModEngine-0.1.16/readme.txt
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
ModEngine-0.1.16/readme.txt
Resource
win10v2004-20230220-en
General
-
Target
ModEngine-0.1.16-6-0-1-16-1605858484.zip
-
Size
301KB
-
MD5
e33023c54137fa25c489a442789843b1
-
SHA1
d078f3d6d3755fa5e49c940dbbd7eafe38773392
-
SHA256
a451f305acd3e38f1136ba1799006a861a08eada6b00011e52804363aef845e0
-
SHA512
d2e9ef199cdd2f0a4c78eb130e0e0dab7d3bc60e2f1eb9d5dff30c2f09d1ad440a18c2d29454797d5244ae1ed402317dc6cfb4af6c97d0f84092b8d8526af5ea
-
SSDEEP
6144:rx1oSm/63eFokDzKSc7v/ftFEdZ+m/rw/tLFYcTMOL3bsArRAsUL2QGjFvfVD4tf:rIF/fF3yScrntFrGk/ZFpMOL4ArR/TQX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ModEngine-0.1.16/dinput8.dll
Files
-
ModEngine-0.1.16-6-0-1-16-1605858484.zip.zip
-
ModEngine-0.1.16/dinput8.dll.dll windows x64
d862717ccc600e5695204d07a5426540
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_47
D3DCompile
imm32
ImmGetContext
ImmSetCompositionWindow
kernel32
VirtualProtect
GetCurrentProcess
GetModuleHandleA
K32GetModuleInformation
VirtualQueryEx
FreeLibraryAndExitThread
Sleep
Beep
GetModuleFileNameA
WriteProcessMemory
lstrlenW
GetPrivateProfileIntW
GetFileAttributesW
GetSystemDirectoryW
GetPrivateProfileStringW
FatalAppExitA
GetCurrentThread
LoadLibraryA
lstrcatW
FreeConsole
LoadLibraryW
CreateThread
GetCurrentDirectoryW
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
AllocConsole
SetUnhandledExceptionFilter
lstrcpynW
GetModuleFileNameW
GlobalAlloc
GlobalLock
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
HeapFree
Thread32Next
SetEndOfFile
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
CloseHandle
HeapAlloc
HeapDestroy
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
SetLastError
RtlCaptureContext
OutputDebugStringA
GetEnvironmentVariableA
GetCurrentDirectoryA
GetLastError
GetFileAttributesA
GetVersionExA
GetThreadId
ReadProcessMemory
FreeLibrary
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
OutputDebugStringW
GetConsoleCP
WriteFile
FlushFileBuffers
GetFileSizeEx
ReadConsoleW
FreeEnvironmentStringsW
GetConsoleMode
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
HeapSize
Thread32First
RtlUnwind
ExitProcess
CreateFileW
SetStdHandle
GetProcessHeap
InitOnceComplete
InitOnceBeginInitialize
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
LoadLibraryExW
ReadFile
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
user32
DefWindowProcA
SetWindowLongPtrA
GetKeyState
ClientToScreen
SetCursorPos
OpenClipboard
CallWindowProcA
EmptyClipboard
GetClipboardData
SetClipboardData
GetWindowRect
GetWindowTextA
IsWindowEnabled
FindWindowW
IsIconic
MessageBoxW
GetAsyncKeyState
GetWindowLongPtrA
CloseClipboard
GetClientRect
advapi32
GetUserNameA
shlwapi
StrStrNIW
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
Exports
Exports
Sections
.text Size: 415KB - Virtual size: 415KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
ModEngine-0.1.16/modengine.ini
-
ModEngine-0.1.16/readme.txt