bd457115209fbb12797acfda2564b4fb686671dbfb6c21a8b3058f4211f9962f

Sharing

Copy URL Twitter E-mail

General

Target

bd457115209fbb12797acfda2564b4fb686671dbfb6c21a8b3058f4211f9962f
Size

1007KB
MD5

82ab673268d4e1a7f3634dd0ae40c283
SHA1

a56df6c2cdc0732edd77590b3eb729338f511b16
SHA256

bd457115209fbb12797acfda2564b4fb686671dbfb6c21a8b3058f4211f9962f
SHA512

780018bb69bd31595755a519b000b8859dff89ab5c93418fd179f2901fbd84bd70d92d66465dfd5a433756959e1b943bb591a1a2b75ff5ee19c2ac2776cbe65c
SSDEEP

24576:qoIu6lTtkijmXVzyosaJhgX7Bq4GYvVTd/1uq6nV0LcTr0Lhkc/bQice:qoIu6lTtkijmX5nOL4mvJd/1An9Tr0LJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd457115209fbb12797acfda2564b4fb686671dbfb6c21a8b3058f4211f9962f

Files

bd457115209fbb12797acfda2564b4fb686671dbfb6c21a8b3058f4211f9962f
.exe windows:6 windows x64 arch:x64

aadb0cd4afa5d471eb52bc12f9ff5f5d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\q\Downloads\PRIVATE-HAX 2.22 undawn\PRIVATE-HAX 2.22\x64\Release\company.pdb

Imports

kernel32

CreateToolhelp32Snapshot
CloseHandle
VirtualAllocEx
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
Process32First
GetConsoleScreenBufferInfo
SetLastError
SetConsoleTextAttribute
SetConsoleTitleA
GetStdHandle
OpenProcess
GetLastError
Process32Next
CreateThread
CreateRemoteThread
AllocConsole
lstrcmpiA
VirtualQueryEx
SetEndOfFile
HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
Module32First
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapReAlloc
GetTimeZoneInformation
GetFileSizeEx
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetFileAttributesExW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
HeapFree
HeapAlloc
GetFileType
ReadConsoleW
GetConsoleMode
SetFilePointerEx
WriteFile
GetModuleFileNameW
Module32Next
WideCharToMultiByte
ReadProcessMemory
ReadFile
GetModuleHandleExW
ExitProcess
RtlUnwind
LoadLibraryExW
TlsFree
Sleep
MultiByteToWideChar
GetOEMCP
WriteProcessMemory
WaitForSingleObjectEx
GetCurrentThreadId
GetLocaleInfoEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitializeCriticalSectionEx
GetSystemTimeAsFileTime
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
TlsAlloc
TlsGetValue
TlsSetValue
WriteConsoleW

user32

UpdateWindow
RegisterClassExA
PostQuitMessage
PeekMessageA
GetClientRect
GetWindowThreadProcessId
GetWindowTextA
EnumWindows
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetKeyState
ScreenToClient
GetCapture
IsChild
GetForegroundWindow
SetCapture
SetCursor
ReleaseCapture
SetCursorPos
GetCursorPos
mouse_event
DispatchMessageA
GetWindowRect
LoadCursorA
DestroyWindow
SetWindowPos
GetSystemMetrics
ShowWindow
GetAsyncKeyState
SetWindowLongA
ClientToScreen
MoveWindow
DefWindowProcA
CreateWindowExA
BringWindowToTop
TranslateMessage
LoadIconA

comdlg32

GetOpenFileNameA

d3d9

Direct3DCreate9Ex

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

Sections

.text
Size: 567KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aadb0cd4afa5d471eb52bc12f9ff5f5d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

comdlg32

d3d9

dwmapi

imm32

Sections

.text Size: 567KB - Virtual size: 566KB

.rdata Size: 136KB - Virtual size: 135KB

.data Size: 9KB - Virtual size: 23KB

.pdata Size: 25KB - Virtual size: 24KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 265KB - Virtual size: 264KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 567KB - Virtual size: 566KB

.rdata
Size: 136KB - Virtual size: 135KB

.data
Size: 9KB - Virtual size: 23KB

.pdata
Size: 25KB - Virtual size: 24KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 265KB - Virtual size: 264KB

.reloc
Size: 3KB - Virtual size: 3KB