990f9285108be64d7977f27c054dfe04

Sharing

Copy URL Twitter E-mail

General

Target

990f9285108be64d7977f27c054dfe04
Size

446KB
MD5

990f9285108be64d7977f27c054dfe04
SHA1

2f18d225dc9428772c0d3c5264a010b62ece8844
SHA256

4ba69eaa61b50145f70220cf81b90f01d9a83f8e1ce99451c66dbf43da131cf2
SHA512

c7a52fa147a93c94b8c2ad9651cd76a55a2de3a7d4ed3684ddd6f607dafecc54f9f6c82adb670db05bd8e41145b81099890c867c330c2e9e5e041828d34bf172
SSDEEP

12288:1a3GDzJowlOnYNp0sDWx302Q8Cv9BbNnDXZ:1a3MzvgYNpbDWxk2Q8cvNn9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
990f9285108be64d7977f27c054dfe04

Files

990f9285108be64d7977f27c054dfe04
.exe windows:6 windows x64 arch:x64

6ebbe65f4462fbbc01fdc8272b9c1ece

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Barkın Emir\Desktop\zeonrecoil\x64\Release\ImGui Loader base.pdb

Imports

kernel32

GetModuleHandleA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
VerifyVersionInfoW
QueryPerformanceCounter
SetPriorityClass
GetCurrentProcess
Sleep
CreateThread
Beep
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WideCharToMultiByte
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
SetEvent
MultiByteToWideChar
CloseHandle

user32

LoadCursorA
GetKeyState
AdjustWindowRectEx
GetWindowLongW
UpdateWindow
SetWindowLongA
PostQuitMessage
PeekMessageA
mouse_event
TranslateMessage
GetAsyncKeyState
DestroyWindow
DispatchMessageA
GetDC
ClientToScreen
IsChild
SetClipboardData
GetClipboardData
EmptyClipboard
GetMonitorInfoA
GetForegroundWindow
DefWindowProcA
CreateWindowExA
SetWindowPos
MonitorFromWindow
EnumDisplayMonitors
ScreenToClient
SetWindowTextW
GetCapture
WindowFromPoint
ShowWindow
GetWindowRect
CloseClipboard
SetLayeredWindowAttributes
SetFocus
OpenClipboard
GetCursorPos
ReleaseDC
SetCursorPos
IsIconic
SetForegroundWindow
ReleaseCapture
RegisterClassExA
UnregisterClassA
GetClientRect
BringWindowToTop
SetCapture
SetCursor
SetWindowLongW
GetDesktopWindow

gdi32

GetDeviceCaps

xinput1_4

ord4
ord2

imm32

ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

d3d9

Direct3DCreate9

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
__C_specific_handler
__current_exception_context
__current_exception
__std_exception_copy
__std_exception_destroy
_CxxThrowException
strstr
__std_terminate
memchr
memcmp
memcpy
memmove

api-ms-win-crt-stdio-l1-1-0

_set_fmode
ftell
fclose
fseek
__p__commode
__acrt_iob_func
fflush
fwrite
_wfopen
fread
__stdio_common_vsscanf
__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcmp

api-ms-win-crt-utility-l1-1-0

qsort
rand

api-ms-win-crt-heap-l1-1-0

_set_new_mode
malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe
_c_exit
_exit
_register_thread_local_exe_atexit_callback
_set_app_type
_crt_atexit
exit
_wassert
_invalid_parameter_noinfo_noreturn
terminate
_register_onexit_function
_get_narrow_winmain_command_line
_initterm_e
_initterm
_configure_narrow_argv
_cexit
_initialize_narrow_environment
_initialize_onexit_table

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-math-l1-1-0

logf
acosf
powf
fmodf
ceilf
sinf
__setusermatherr
sqrtf
floorf
cosf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 335KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ebbe65f4462fbbc01fdc8272b9c1ece

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

xinput1_4

imm32

d3d9

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 335KB - Virtual size: 334KB

.rdata Size: 91KB - Virtual size: 90KB

.data Size: 3KB - Virtual size: 4KB

.pdata Size: 15KB - Virtual size: 14KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 680B

.text
Size: 335KB - Virtual size: 334KB

.rdata
Size: 91KB - Virtual size: 90KB

.data
Size: 3KB - Virtual size: 4KB

.pdata
Size: 15KB - Virtual size: 14KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 680B