C:\Users\Torenta\source\repos\New folder\Stake Predictor\Stake Predictor\obj\Debug\Stake Predictor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Stake-Casino-predictorV5.5/ACR.vbs
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
Stake-Casino-predictorV5.5/ACR.vbs
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
Stake-Casino-predictorV5.5/setEn.exe
Resource
win7-20240220-en
Behavioral task
behavioral4
Sample
Stake-Casino-predictorV5.5/setEn.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
Stake-Casino-predictorV5.5/stake Predictor V5.5.exe
Resource
win7-20240221-en
General
-
Target
Stake-Casino-predictorV5.5.zip
-
Size
351KB
-
MD5
1e64d0526bee5b7e9bd159673309572b
-
SHA1
edb4a6982d534794c8c422db3690a139c4c644a2
-
SHA256
07addd5f6a6043507b62aad44d663d9cc2ae07cbd725c66bc047251b5f5bc2e6
-
SHA512
25685ac07d13d266505226f583e9e99357e57cb40f978a7905f64cccc44ba836d4208f1fd57fdccef2f81435f472ef21c8e79b5bd7327ac743f79054024c8b1b
-
SSDEEP
6144:Uwh/NAXy+F+tlPyyGuk+Ns4V6HiXLki8ywYQWIu4VPZdNxCjNYHTlV:J/NA54tlayGB+NsYpXLPtwDPzZdN8jN8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Stake-Casino-predictorV5.5/setEn.bin
Files
-
Stake-Casino-predictorV5.5.zip.zip
-
Stake-Casino-predictorV5.5/ACR.dll.vbs
-
Stake-Casino-predictorV5.5/setEn.bin.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Stake-Casino-predictorV5.5/stake Predictor V5.5.exe.exe windows:4 windows x64 arch:x64
Code Sign
7b:2c:9b:d3:16:80:32:99Certificate
IssuerCN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=USNot Before12/02/2016, 17:39Not After12/02/2041, 17:39SubjectCN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
40:71:bf:d4:0b:15:02:0a:57:fa:d2:0e:1a:50:d3:a7Certificate
IssuerCN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=USNot Before14/09/2023, 19:00Not After13/09/2024, 19:00SubjectCN=Raecomm Services Ltd,O=Raecomm Services Ltd,L=Rowlands Gill,ST=England,C=GBExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
64:33:51:d3:c7:38:9f:08Certificate
IssuerCN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=USNot Before24/06/2016, 20:44Not After24/06/2031, 20:44SubjectCN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
1a:d6:08:a7:d6:34:b5:cd:de:97:cb:a3:cc:f0:d0:4bCertificate
IssuerCN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=USNot Before09/12/2022, 18:30Not After06/12/2032, 18:30SubjectCN=SSL.com Timestamping Unit 2022,O=SSL Corp,L=Houston,ST=Texas,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56Certificate
IssuerCN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=USNot Before13/11/2019, 18:50Not After12/11/2034, 18:50SubjectCN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
09:2a:7a:09:7d:f7:9e:d8:67:69:99:04:73:cb:d2:21:a8:39:3a:dc:14:77:dd:f6:86:6a:f5:16:15:f6:9a:dfSigner
Actual PE Digest09:2a:7a:09:7d:f7:9e:d8:67:69:99:04:73:cb:d2:21:a8:39:3a:dc:14:77:dd:f6:86:6a:f5:16:15:f6:9a:dfDigest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\cloudito\Desktop\offlinee\Light-The-Dark-1.0.1\obj\Debug\stake Predictor V5.5.pdb
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ