OSU-FREEDOM-main[.]zip

Resubmissions

27/11/2024, 09:54

241127-lxghnaylhv 10

18/12/2023, 21:10

231218-z1gvgsfbg6 10

Sharing

Copy URL

Twitter E-mail

General

Target

OSU-FREEDOM-main.zip
Size

688KB
MD5

1bcb29c6501c07faf938b3f967be18f1
SHA1

ea26d87c1e37b44cd8328874e1603d5eb6b821cd
SHA256

b46011c5f70960debda8166ad56d523bf8bbd19bd9a0a0a1346be4cb14dc2598
SHA512

7e757cdef593b90ad66d827c21743d75efa9e5e7eb5843e5b9d2ee1eb5def08bdf2f3ca469eb0cd635f83b129cdc2907a4f359f08601a3ec1e6c290fa22e1e5b
SSDEEP

12288:PPpzOlBu9mijskwPKiL/FjzsLT+zNe9fRallVelraYyDiPcbD5t5UY:PPpCDu9rqPZVsT+zNe9ZalnzYyR9Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/OSU-FREEDOM-main/freedom.dll
unpack001/OSU-FREEDOM-main/freedom.exe
unpack001/OSU-FREEDOM-main/prejit.dll

Files

OSU-FREEDOM-main.zip
.zip
OSU-FREEDOM-main/README.md
OSU-FREEDOM-main/freedom.dll
.dll windows:6 windows x86 arch:x86

88b5e61bd699e707fead045c92e62e31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winhttp

WinHttpConnect
WinHttpCloseHandle
WinHttpReadData
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest

opengl32

wglGetCurrentDC

user32

WindowFromDC
GetAsyncKeyState
OpenClipboard
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowTextA
GetSystemMetrics
SendInput
LoadCursorW
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
CloseClipboard
ReleaseCapture
SetCapture
GetCapture
GetKeyState
TrackMouseEvent
EmptyClipboard
GetClipboardData
SetClipboardData
GetForegroundWindow

kernel32

FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
DecodePointer
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
LCMapStringW
GetFileType
GetStdHandle
HeapFree
GetModuleFileNameW
WideCharToMultiByte
GetCurrentProcess
VirtualProtect
VirtualQuery
ReadProcessMemory
GetModuleHandleA
GetModuleHandleW
GetProcAddress
K32QueryWorkingSetEx
CloseHandle
Sleep
CreateThread
VirtualFree
FreeLibrary
VirtualAlloc
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
GetLastError
EnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
CreateEventW
IsProcessorFeaturePresent
GetCurrentThreadId
WaitForSingleObjectEx
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
HeapAlloc
GetProcessHeap
GetStringTypeW
SetStdHandle
CreateFileW
HeapReAlloc
HeapSize
SetEndOfFile
WriteConsoleW
LeaveCriticalSection
InitializeCriticalSectionEx
ExitProcess
ReadFile
GetModuleHandleExW
FreeLibraryAndExitThread
RtlUnwind
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitThread

imm32

ImmSetCompositionWindow
ImmAssociateContextEx
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow

Sections

.text
Size: 410KB - Virtual size: 409KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OSU-FREEDOM-main/freedom.exe
.exe windows:4 windows x64 arch:x64

46702e615a96538f4944f7d15b37d4d8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
HeapCreate
HeapAlloc
GetModuleHandleA
CreateEventA
WaitForSingleObject
CloseHandle
HeapDestroy
GetModuleFileNameW
lstrlenW
HeapFree
GetProcessHeap
Sleep
GetSystemTimeAsFileTime

user32

LoadIconW
CreateMenu
LoadBitmapW
DrawMenuBar
GetClientRect
FillRect
RegisterClassW
CreateWindowExW
DestroyMenu
ReleaseDC
CharUpperBuffW
GetCursor
DestroyIcon
DispatchMessageW
IsZoomed
CreateAcceleratorTableW
DrawFocusRect
IsIconic
GetClassInfoExW
SetTimer
DeleteMenu
IsDialogMessageW
InsertMenuW
DrawIcon
SetScrollPos
CopyImage
GetClassInfoW
DestroyCursor
DefMDIChildProcW
EndMenu
SetMenuItemInfoW
GetScrollPos
GetMenuStringW
DefFrameProcW
FrameRect
ShowCaret
GetDlgCtrlID
GetScrollInfo
PeekMessageW
LoadCursorW
GetWindowTextW
GetSystemMenu
PostMessageW
EndPaint
GetMenuItemInfoW
GetDCEx
EnableWindow
GetScrollRange
ShowWindow
BeginPaint
DestroyWindow
LoadStringW
KillTimer
MsgWaitForMultipleObjectsEx
CreateIcon

gdi32

StretchBlt
Pie
RoundRect
CreateDCW
Polygon
SetBkMode
RectVisible
SetAbortProc
PolyBezierTo
CreateCompatibleBitmap
GetWindowOrgEx
CreateSolidBrush
AngleArc
GetTextMetricsW
CreateICW
GetEnhMetaFileHeader
SetTextColor
GetStockObject
RestoreDC
SetRectRgn
CreatePalette
MoveToEx

ole32

OleUninitialize
CoUninitialize
OleInitialize
CoCreateInstance
IsEqualGUID
CoTaskMemFree
CoInitialize
CoTaskMemAlloc

oleaut32

VariantCopyInd
SafeArrayGetUBound
VariantCopy
SafeArrayGetElement
VariantInit
SafeArrayCreate
SafeArrayPtrOfIndex
GetErrorInfo
SafeArrayGetLBound
SysAllocStringLen
SafeArrayUnaccessData
SysFreeString
SysReAllocStringLen
SafeArrayAccessData
VariantClear
SafeArrayPutElement
VariantChangeType

msvcrt

memcpy
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
exit
_acmdln
_initterm
qsort
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
wcsrchr
memset
_amsg_exit
wcschr

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
OSU-FREEDOM-main/prejit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

88b5e61bd699e707fead045c92e62e31

Headers

DLL Characteristics

File Characteristics

Imports

winhttp

opengl32

user32

kernel32

imm32

Sections

.text Size: 410KB - Virtual size: 409KB

.rdata Size: 236KB - Virtual size: 236KB

.data Size: 4KB - Virtual size: 16KB

.reloc Size: 16KB - Virtual size: 16KB

46702e615a96538f4944f7d15b37d4d8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

msvcrt

version

Sections

.text Size: 204KB - Virtual size: 203KB

.textbss Size: - Virtual size: 64KB

.rdata Size: 332KB - Virtual size: 331KB

.data Size: 512B - Virtual size: 144B

.pdata Size: 512B - Virtual size: 300B

.rsrc Size: 1024B - Virtual size: 1024B

.reloc Size: 512B - Virtual size: 72B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 4KB - Virtual size: 4KB

.rsrc Size: 1024B - Virtual size: 672B

.reloc Size: 512B - Virtual size: 12B

.text
Size: 410KB - Virtual size: 409KB

.rdata
Size: 236KB - Virtual size: 236KB

.data
Size: 4KB - Virtual size: 16KB

.reloc
Size: 16KB - Virtual size: 16KB

.text
Size: 204KB - Virtual size: 203KB

.textbss
Size: - Virtual size: 64KB

.rdata
Size: 332KB - Virtual size: 331KB

.data
Size: 512B - Virtual size: 144B

.pdata
Size: 512B - Virtual size: 300B

.rsrc
Size: 1024B - Virtual size: 1024B

.reloc
Size: 512B - Virtual size: 72B

.text
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1024B - Virtual size: 672B

.reloc
Size: 512B - Virtual size: 12B