ruffle-nightly-2024_01_23-windows-x86_64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

ruffle-nightly-2024_01_23-windows-x86_64.zip
Size

9.4MB
MD5

18022938c97452cb31d3a680753f455c
SHA1

6dba3ea3382e9a93ecbaa140dd3c0bf51c5b6a7f
SHA256

0989d8987f566ffd78d3dd24c30d46e432d1e41023627eaf609dddd6f37a7465
SHA512

ea20dd633ae6306c96b0ecf23270d04ea5bee95856489fe709000d73eff19d20413720fd259860d0eb81a3ee254d66d25a8fc18d16b31a6dc383562c7342eace
SSDEEP

196608:1D8Q6olQIgHWLl9j6nLIPy2lUJRlt0UKaSBrDE5HB6ysYW1rl/qedmNKDJ:1DxlQXsl9g2Sjlt0zHEzTs3/dIKDJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ruffle.exe

Files

ruffle-nightly-2024_01_23-windows-x86_64.zip
.zip
LICENSE.md
README.md
ruffle.exe
.exe windows:6 windows x64 arch:x64

e3479a9a2a37628f4671eba12c8e74d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shlwapi

AssocQueryStringW

kernel32

GlobalLock
GlobalSize
GlobalAlloc
GlobalFree
WideCharToMultiByte
MultiByteToWideChar
PostQueuedCompletionStatus
CreateIoCompletionPort
SetFileCompletionNotificationModes
GetQueuedCompletionStatusEx
GetModuleHandleW
SetHandleInformation
GetCurrentProcessId
SetLastError
QueryPerformanceCounter
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
QueryPerformanceFrequency
GetSystemDirectoryA
FreeLibrary
LoadLibraryA
MoveFileExA
WaitForSingleObjectEx
GetEnvironmentVariableA
SleepEx
VerSetConditionMask
VerifyVersionInfoW
CreateFileA
GetFileSizeEx
ReadFile
UnregisterWait
RegisterWaitForSingleObject
WaitForMultipleObjectsEx
GetProcessHeap
HeapAlloc
HeapFree
WaitForSingleObject
SleepConditionVariableSRW
GetFileInformationByHandle
DeleteFileA
GetTempPathA
GetTempFileNameA
TzSpecificLocalTimeToSystemTime
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
RemoveVectoredExceptionHandler
AddVectoredExceptionHandler
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameW
SetThreadErrorMode
LoadLibraryExA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
FreeEnvironmentStringsW
DeleteProcThreadAttributeList
CompareStringOrdinal
SetThreadStackGuarantee
SwitchToThread
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCommandLineW
SetFilePointerEx
GetStdHandle
WriteFileEx
GetExitCodeProcess
TerminateProcess
Sleep
WakeConditionVariable
HeapReAlloc
ReleaseMutex
FindNextFileW
FindClose
GetFileInformationByHandleEx
CreateDirectoryW
FindFirstFileW
DeleteFileW
GetFinalPathNameByHandleW
GetFileType
ExitProcess
GetFullPathNameW
CreateNamedPipeW
ReadFileEx
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
WriteConsoleW
ReadConsoleW
CreateThread
GetCurrentThread
GetSystemTimeAsFileTime
CreateMutexA
GetTimeZoneInformation
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
OutputDebugStringW
SetEndOfFile
SetStdHandle
GetFileAttributesExW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleOutputCP
GetCommandLineA
WriteFile
FreeLibraryAndExitThread
ExitThread
FileTimeToSystemTime
PeekNamedPipe
GetDriveTypeW
RtlPcToFileHeader
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
EncodePointer
RtlUnwindEx
FormatMessageW
GlobalUnlock
FlushFileBuffers
VirtualProtect
UnmapViewOfFile
DuplicateHandle
GetCurrentProcess
MapViewOfFile
CreateFileMappingW
GetUserPreferredUILanguages
GetLastError
SetConsoleMode
GetConsoleMode
CreateFileW
lstrlenW
GetSystemInfo
GetProcAddress
GetModuleHandleA
GetCurrentThreadId
AttachConsole
FreeConsole
SetEvent
AcquireSRWLockShared
CreateEventA
TryAcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CloseHandle
HeapSize
RtlUnwind
WakeAllConditionVariable
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter

ws2_32

listen
accept
getsockname
getpeername
getsockopt
recv
send
setsockopt
WSACloseEvent
WSACreateEvent
ioctlsocket
WSAGetLastError
ntohs
WSASetLastError
WSAStartup
WSACleanup
htons
socket
__WSAFDIsSet
select
htonl
getaddrinfo
freeaddrinfo
WSASocketW
WSAIoctl
closesocket
connect
bind

crypt32

CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CryptDecodeObjectEx
CertFindCertificateInStore
CertGetEnhancedKeyUsage
CryptStringToBinaryA
CertFreeCertificateContext
CertEnumCertificatesInStore
CertAddCertificateContextToStore
PFXImportCertStore
CertOpenStore
CertCloseStore
CertDuplicateCertificateContext
CertFreeCertificateChain

user32

SendInput
MapVirtualKeyW
GetAsyncKeyState
GetKeyState
GetKeyboardState
MapVirtualKeyExW
ToUnicodeEx
CreateWindowExA
ShowWindow
SetWindowLongW
GetWindowLongW
AdjustWindowRectEx
EnableMenuItem
RegisterClassExA
DefWindowProcA
IsProcessDPIAware
GetSystemMenu
SetWindowTextW
EnumDisplayMonitors
DestroyIcon
SendMessageW
ReleaseCapture
OpenClipboard
SetCapture
RegisterWindowMessageA
EmptyClipboard
GetRawInputData
KillTimer
SetTimer
RegisterRawInputDevices
SetForegroundWindow
GetClipCursor
IsClipboardFormatAvailable
SystemParametersInfoA
GetKeyboardLayout
GetClipboardData
GetWindowRect
CreateIcon
ShowCursor
ClipCursor
MessageBoxW
GetSystemMetrics
GetWindowLongPtrW
DestroyWindow
GetClientRect
RedrawWindow
PostMessageW
RegisterClipboardFormatW
GetActiveWindow
ClientToScreen
SetWindowPlacement
GetWindowPlacement
ChangeDisplaySettingsExW
GetMonitorInfoW
MonitorFromWindow
GetCursorPos
TrackMouseEvent
CloseTouchInputHandle
GetTouchInputInfo
MonitorFromRect
SetCursor
LoadCursorW
ScreenToClient
GetMenu
TranslateMessage
DispatchMessageW
PeekMessageW
DefWindowProcW
ValidateRect
SetWindowLongPtrW
CreateWindowExW
RegisterClassExW
InvalidateRgn
SetWindowPos
SetWindowDisplayAffinity
ReleaseDC
GetMessageW
CloseClipboard
SetClipboardData
GetDC
RegisterTouchWindow

ole32

RegisterDragDrop
OleInitialize
CoTaskMemFree
CoCreateInstance
CoInitializeEx
RevokeDragDrop
CoUninitialize

gdi32

GetPixelFormat
DescribePixelFormat
ChoosePixelFormat
DeleteObject
GetDeviceCaps
SwapBuffers
SetPixelFormat
CreateRectRgn

dwmapi

DwmEnableBlurBehindWindow

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
RegOpenKeyExW
RegQueryValueExW
SystemFunction036

shell32

DragFinish
SHGetKnownFolderPath
DragQueryFileW
SHCreateItemFromParsingName

bcrypt

BCryptGenRandom

oleaut32

GetErrorInfo
SysFreeString
SysStringLen

uxtheme

SetWindowTheme

imm32

ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmAssociateContextEx
ImmReleaseContext
ImmGetContext

opengl32

wglMakeCurrent
wglDeleteContext
wglGetProcAddress
wglCreateContext
wglGetCurrentContext

d3dcompiler_47

D3DCompile

ntdll

RtlNtStatusToDosError
NtReadFile
NtWriteFile

Exports

Exports

PKCreateCodecFactory
PKImageDecode_Create_WMP
PKImageEncode_Create_TIF
PKImageEncode_Transcode
PixelFormatLookup
Ruffle_PKFormatConverterInitialize
Ruffle_SetPixelFormat

Sections

.text
Size: 17.7MB - Virtual size: 17.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.7MB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 299KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e3479a9a2a37628f4671eba12c8e74d3

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

ws2_32

crypt32

user32

ole32

gdi32

dwmapi

advapi32

shell32

bcrypt

oleaut32

uxtheme

imm32

opengl32

d3dcompiler_47

ntdll

Exports

Exports

Sections

.text Size: 17.7MB - Virtual size: 17.7MB

.rdata Size: 5.7MB - Virtual size: 5.7MB

.data Size: 24KB - Virtual size: 77KB

.pdata Size: 299KB - Virtual size: 299KB

_RDATA Size: 512B - Virtual size: 500B

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 149KB - Virtual size: 148KB

.text
Size: 17.7MB - Virtual size: 17.7MB

.rdata
Size: 5.7MB - Virtual size: 5.7MB

.data
Size: 24KB - Virtual size: 77KB

.pdata
Size: 299KB - Virtual size: 299KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 149KB - Virtual size: 148KB