C:\Users\Stowe\Documents\Projects\Project-Reboot-3.0\x64\Release\Project Reboot 3.0.pdb
Static task
static1
1 signatures
General
-
Target
Project_Reboot_3.0.dll
-
Size
2.4MB
-
MD5
c8a852ec618214369ec526d43e6cecef
-
SHA1
5b51ef4369e3039def8f646ddfdf76b9d2b580f8
-
SHA256
09c3632a1ff26e3662ff5a2da932cb1ee34d349708f91d1509768f2cf6a2250b
-
SHA512
311d58c9af035dee9de21a73df02a3790d668d195b01dc5e3c86879d1bbe1065b3bfa1106fa09ce0a082b595e24adcdf4b0f272ae685080924f138ca6bdf5aba
-
SSDEEP
49152:6AKJhEBIG0hWRlK45K1phHnsN72cB1u4o0PS0HS+iFQTG0Cwnt5hnSKIJydEB7iY:OV5nzWAB7i4zV
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Project_Reboot_3.0.dll
Files
-
Project_Reboot_3.0.dll.dll windows:6 windows x64 arch:x64
063ff467937180e9f51ad7af7ebc542f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
CreateWindowExW
UnregisterClassW
RegisterClassExW
ShowWindow
DispatchMessageW
PeekMessageW
TranslateMessage
PostQuitMessage
UpdateWindow
MessageBoxA
GetKeyState
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
LoadCursorW
SetCapture
SetCursor
GetClientRect
GetWindowRect
DefWindowProcW
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
ScreenToClient
SetClipboardData
kernel32
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
VirtualFree
GetStdHandle
WriteConsoleA
WriteFile
VirtualAlloc
GetDynamicTimeZoneInformation
GetCurrentThreadId
GetConsoleMode
GetCurrentProcessId
SuspendThread
HeapAlloc
GetCurrentThread
GetModuleHandleW
VirtualProtect
SetConsoleTitleA
HeapCreate
HeapReAlloc
Sleep
GetFileAttributesA
GetThreadContext
RtlCaptureContext
CloseHandle
QueryPerformanceCounter
CreateThread
RtlLookupFunctionEntry
SetThreadContext
HeapFree
RtlVirtualUnwind
GetCurrentProcess
GetModuleHandleA
GetSystemTimeAsFileTime
FlushInstructionCache
CreateToolhelp32Snapshot
Thread32First
VirtualQuery
Thread32Next
FreeLibrary
GetLocaleInfoEx
FormatMessageA
LocalFree
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
AreFileApisANSI
SleepEx
GetSystemDirectoryA
GetCurrentDirectoryW
GetLastError
SetLastError
FormatMessageW
MoveFileExA
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
WaitForSingleObjectEx
GetSystemInfo
VerSetConditionMask
OpenThread
GetProcAddress
ResumeThread
QueryPerformanceFrequency
IsBadReadPtr
GlobalUnlock
WideCharToMultiByte
GlobalLock
LoadLibraryA
GlobalFree
GlobalAlloc
SleepConditionVariableSRW
GetEnvironmentVariableA
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VerifyVersionInfoW
CreateFileA
GetFileSizeEx
WakeAllConditionVariable
MultiByteToWideChar
AcquireSRWLockExclusive
AllocConsole
ReleaseSRWLockExclusive
ws2_32
recv
closesocket
accept
WSACleanup
socket
send
WSAStartup
gethostname
inet_pton
ioctlsocket
WSAIoctl
sendto
recvfrom
setsockopt
freeaddrinfo
getaddrinfo
ntohs
getsockname
WSACloseEvent
getsockopt
connect
WSACreateEvent
listen
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
WSAGetLastError
__WSAFDIsSet
htonl
ntohl
select
bind
htons
WSASetLastError
getpeername
advapi32
CryptImportKey
CryptEncrypt
CryptDestroyKey
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
crypt32
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CryptQueryObject
CertGetNameStringA
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertAddCertificateContextToStore
CertFindExtension
CertOpenStore
imm32
ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext
ImmSetCandidateWindow
ImmAssociateContextEx
msvcp140
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@PEAV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?_Random_device@std@@YAIXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_signal
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$numpunct@D@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Thrd_id
_Xtime_get_ticks
_Thrd_join
_Mtx_unlock
_Cnd_destroy_in_situ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Strcoll
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?narrow@?$ctype@_W@std@@QEBAPEB_WPEB_W0DPEAD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?uncaught_exceptions@std@@YAHXZ
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
d3d9
Direct3DCreate9
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_destroy_list
_CxxThrowException
__std_terminate
strstr
strchr
__std_exception_destroy
__std_exception_copy
_purecall
strrchr
memcpy
memset
memmove
memcmp
memchr
__current_exception
__current_exception_context
__C_specific_handler
api-ms-win-crt-stdio-l1-1-0
fread
ftell
__stdio_common_vsprintf
__acrt_iob_func
fflush
_read
fclose
_lseeki64
_open
fopen
fgetpos
fseek
fgets
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
_write
_close
feof
fputs
fputc
freopen_s
fwrite
_fsopen
__stdio_common_vsprintf_s
_wfopen
_get_stream_buffer_pointers
_fseeki64
fsetpos
ungetc
setvbuf
fgetc
__stdio_common_vsscanf
api-ms-win-crt-string-l1-1-0
tolower
isdigit
strpbrk
strcmp
strncpy
strcspn
toupper
strspn
isupper
strncmp
_strdup
api-ms-win-crt-utility-l1-1-0
qsort
rand
srand
api-ms-win-crt-heap-l1-1-0
malloc
realloc
calloc
free
_callnewh
api-ms-win-crt-runtime-l1-1-0
_cexit
_crt_atexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_invalid_parameter_noinfo
terminate
_register_onexit_function
_errno
_initialize_onexit_table
__sys_errlist
__sys_nerr
_initialize_narrow_environment
_beginthreadex
_configure_narrow_argv
_getpid
_seh_filter_dll
api-ms-win-crt-convert-l1-1-0
strtod
strtoul
atoi
atof
wcstombs
strtoll
strtof
strtoull
strtol
api-ms-win-crt-time-l1-1-0
strftime
_gmtime64
_localtime64_s
_gmtime64_s
_time64
api-ms-win-crt-math-l1-1-0
_dclass
_fdclass
_ldclass
acosf
ceilf
cosf
floor
_fdsign
sqrtf
fmaf
fmodf
_dsign
powf
roundf
_ldsign
floorf
sinf
fminf
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_access
_stat64
_fstat64
_lock_file
_unlink
_mkdir
api-ms-win-crt-locale-l1-1-0
localeconv
___lc_codepage_func
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 1.8MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 571KB - Virtual size: 570KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ