18-11-2023_zgY7trCC8ZnkUmY[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

18-11-2023_zgY7trCC8ZnkUmY.zip
Size

1022KB
MD5

acaa7595a08aa4dc40a9688b3aea08a8
SHA1

3ab80d0af9440e6854f34c517c68d5164686ad26
SHA256

371dcc4df3c38e993f517e23e4f5071d164aa53e816025723d52a9c8f4f53476
SHA512

47e62f24e361d80bf2ac821b4fc48f7a4c83f052c152d1df2b863740929b00f2d829ccab0cdc92d5458d556f7b2cb4b8378f41da4972d3466c3e58639cf46c21
SSDEEP

24576:YO7MNQfweBSrnpeTs80aeydruv2wKy6WbG/oQCtvgXaPQiajV:YOQNQfweYrks8beua/AWq/0tvuUQii

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Skyline Rust Hack/Skyline.fix.dll

Files

18-11-2023_zgY7trCC8ZnkUmY.zip
.zip

Password: 123
Skyline Rust Hack/Skyline.fix.dll
.dll windows:6 windows x64 arch:x64

Password: 123

9509bd594cd13803b33fe83f48f01573

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

WritePrivateProfileStringA
CreateThread
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
VirtualProtectEx
HeapDestroy
Beep
GetProcAddress
DeleteCriticalSection
GetCurrentProcessId
GetProcessHeap
WideCharToMultiByte
CreateDirectoryA
GetPrivateProfileStringA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
CloseHandle
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
FindFirstFileW
HeapReAlloc
CreateFileW
CreateDirectoryW
GetLocaleInfoEx
FormatMessageA
LocalFree
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
LockResource
GetLastError
MultiByteToWideChar
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
TerminateProcess
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
CreateFileA
GetFileSizeEx
ReadFile
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
GetModuleHandleA
InitializeCriticalSectionEx
RaiseException
HeapFree
SizeofResource
FindClose
FindFirstFileExW

user32

ClientToScreen
GetForegroundWindow
GetCapture
ScreenToClient
LoadCursorW
GetMessageExtraInfo
GetKeyState
SetCapture
GetAsyncKeyState
SetCursor
GetCursorPos
EnumWindows
GetSystemMetrics
SetWindowLongPtrW
GetClientRect
IsWindowUnicode
ReleaseCapture
SetCursorPos
CallWindowProcW
GetWindowThreadProcessId
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
TrackMouseEvent

msvcp140

?_Xbad_function_call@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

ntdll

RtlVirtualUnwind
RtlCaptureContext
RtlLookupFunctionEntry

imm32

ImmReleaseContext
ImmSetCandidateWindow
ImmGetContext
ImmSetCompositionWindow

d3dcompiler_43

D3DCompile

vcruntime140

__std_exception_copy
_CxxThrowException
__intrinsic_setjmp
__C_specific_handler
strstr
memcmp
memchr
memcpy
longjmp
strrchr
memmove
__std_type_info_destroy_list
memset
__std_exception_destroy

api-ms-win-crt-stdio-l1-1-0

fwrite
__stdio_common_vsscanf
_wfopen
fflush
__stdio_common_vfprintf
fseek
__acrt_iob_func
ftell
__stdio_common_vsprintf_s
fclose
__stdio_common_vsprintf
fread

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_errno
terminate
_seh_filter_dll
_configure_narrow_argv
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_invalid_parameter_noinfo

api-ms-win-crt-utility-l1-1-0

qsort
rand

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-convert-l1-1-0

strtol
atoi
atof

api-ms-win-crt-string-l1-1-0

strcmp
strncmp
strncpy

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-math-l1-1-0

fmodf
cos
atan2f
powf
acosf
atan2
asinf

Sections

.text
Size: 839KB - Virtual size: 838KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 586KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 271KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 123

Password: 123

9509bd594cd13803b33fe83f48f01573

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

d3dx11_43

ntdll

imm32

d3dcompiler_43

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-locale-l1-1-0

vcruntime140_1

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 839KB - Virtual size: 838KB

.rdata Size: 586KB - Virtual size: 586KB

.data Size: 271KB - Virtual size: 276KB

.pdata Size: 32KB - Virtual size: 31KB

_RDATA Size: 9KB - Virtual size: 8KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 839KB - Virtual size: 838KB

.rdata
Size: 586KB - Virtual size: 586KB

.data
Size: 271KB - Virtual size: 276KB

.pdata
Size: 32KB - Virtual size: 31KB

_RDATA
Size: 9KB - Virtual size: 8KB

.reloc
Size: 4KB - Virtual size: 3KB