c:\Documents and Settings\jmacd\src\xdelta3\Release\xdelta3.pdb
Overview
overview
7Static
static
3Training.M...7.2.7z
windows10-2004-x64
7Training M...ns.txt
windows10-2004-x64
1Training M...ns.txt
windows10-2004-x64
1Training M...71.zip
windows10-2004-x64
1MultiPatch...ources
windows10-2004-x64
1MultiPatch...fo.xml
windows10-2004-x64
1MultiPatch...iPatch
windows10-2004-x64
1MultiPatch...kgInfo
windows10-2004-x64
1MultiPatch...nu.nib
windows10-2004-x64
3MultiPatch...s.icns
windows10-2004-x64
3MultiPatch...trings
windows10-2004-x64
3MultiPatch...es.xml
windows10-2004-x64
1MultiPatch/ReadMe.rtf
windows10-2004-x64
1__MACOSX/M...Me.rtf
windows10-2004-x64
1Training M...re.bat
windows10-2004-x64
1Training M...ns.txt
windows10-2004-x64
1Training M...ta.exe
windows10-2004-x64
1Training M...xdelta
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
Training.Mode.3.0.Alpha7.2.7z
Resource
win10v2004-20240221-en
Behavioral task
behavioral2
Sample
Training Mode 3.0 Alpha7.2/TM ISO Builder/Linux/Linux Instructions.txt
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
Training Mode 3.0 Alpha7.2/TM ISO Builder/Mac/Mac Instructions.txt
Resource
win10v2004-20240221-en
Behavioral task
behavioral4
Sample
Training Mode 3.0 Alpha7.2/TM ISO Builder/Mac/multipatch171.zip
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
MultiPatch/MultiPatch.app/Contents/CodeResources
Resource
win10v2004-20240221-en
Behavioral task
behavioral6
Sample
MultiPatch/MultiPatch.app/Contents/Info.xml
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
MultiPatch/MultiPatch.app/Contents/MacOS/MultiPatch
Resource
win10v2004-20240221-en
Behavioral task
behavioral8
Sample
MultiPatch/MultiPatch.app/Contents/PkgInfo
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
MultiPatch/MultiPatch.app/Contents/Resources/Base.lproj/MainMenu.nib
Resource
win10v2004-20240221-en
Behavioral task
behavioral10
Sample
MultiPatch/MultiPatch.app/Contents/Resources/bandages.icns
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
MultiPatch/MultiPatch.app/Contents/Resources/en.lproj/InfoPlist.strings
Resource
win10v2004-20240221-en
Behavioral task
behavioral12
Sample
MultiPatch/MultiPatch.app/Contents/_CodeSignature/CodeResources.xml
Resource
win10v2004-20240221-en
Behavioral task
behavioral13
Sample
MultiPatch/ReadMe.rtf
Resource
win10v2004-20240221-en
Behavioral task
behavioral14
Sample
__MACOSX/MultiPatch/._ReadMe.rtf
Resource
win10v2004-20240221-en
Behavioral task
behavioral15
Sample
Training Mode 3.0 Alpha7.2/TM ISO Builder/Windows/Drag Melee v1.02 ISO Here.bat
Resource
win10v2004-20240221-en
Behavioral task
behavioral16
Sample
Training Mode 3.0 Alpha7.2/TM ISO Builder/Windows/Windows Instructions.txt
Resource
win10v2004-20240221-en
Behavioral task
behavioral17
Sample
Training Mode 3.0 Alpha7.2/TM ISO Builder/Windows/xdelta.exe
Resource
win10v2004-20240221-en
Behavioral task
behavioral18
Sample
Training Mode 3.0 Alpha7.2/TM ISO Builder/patch.xdelta
Resource
win10v2004-20240221-en
General
-
Target
Training.Mode.3.0.Alpha7.2.7z
-
Size
7.1MB
-
MD5
0f3f6ce5c39bc98ab5c8490e0993f51e
-
SHA1
ad241565b3bef3c4336df19f6f0dafdf1f1b7576
-
SHA256
6f3bcab12ed0781eb469fe37b9d677460e4a4579617193cca1fdb1f2a4e7f29f
-
SHA512
e1acd2483b7600cdbe229f3a6b0ee9638f853fa34fe652025fdd1110795dda8b761ea5826921d1951a24f2bb30272eedf3a6d15188d682c0515e09cee70dd7cd
-
SSDEEP
196608:IrjvpDgM9zH4KUSABogBYTV6zeDHCRqCPEf0ja4nb:Evpcuz457BoFQSSqLf0jPb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Training Mode 3.0 Alpha7.2/TM ISO Builder/Windows/xdelta.exe
Files
-
Training.Mode.3.0.Alpha7.2.7z.7z
-
Training Mode 3.0 Alpha7.2/TM ISO Builder/Linux/Linux Instructions.txt
-
Training Mode 3.0 Alpha7.2/TM ISO Builder/Mac/Mac Instructions.txt
-
Training Mode 3.0 Alpha7.2/TM ISO Builder/Mac/multipatch171.zip.zip
-
MultiPatch/MultiPatch.app/Contents/CodeResources
-
MultiPatch/MultiPatch.app/Contents/Info.plist.xml
-
MultiPatch/MultiPatch.app/Contents/MacOS/MultiPatch.macho macos arch:arm64 arch:x64
-
MultiPatch/MultiPatch.app/Contents/PkgInfo
-
MultiPatch/MultiPatch.app/Contents/Resources/Base.lproj/MainMenu.nib
-
MultiPatch/MultiPatch.app/Contents/Resources/bandages.icns
-
MultiPatch/MultiPatch.app/Contents/Resources/en.lproj/InfoPlist.strings
-
MultiPatch/MultiPatch.app/Contents/_CodeSignature/CodeResources.xml
-
MultiPatch/ReadMe.rtf.rtf
-
__MACOSX/MultiPatch/._ReadMe.rtf
-
Training Mode 3.0 Alpha7.2/TM ISO Builder/Windows/Drag Melee v1.02 ISO Here.bat
-
Training Mode 3.0 Alpha7.2/TM ISO Builder/Windows/Windows Instructions.txt
-
Training Mode 3.0 Alpha7.2/TM ISO Builder/Windows/xdelta.exe.exe windows:5 windows x86 arch:x86
3fc2c2072db94fef44ffa635543f13dc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateFileA
SystemTimeToFileTime
SetFilePointerEx
FormatMessageA
WriteFile
ReadFile
GetFileSizeEx
GetStartupInfoA
GetStdHandle
GetLastError
GetLocalTime
CloseHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetCommandLineA
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetModuleFileNameA
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
SetHandleCount
GetFileType
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetFileAttributesA
GetFullPathNameA
GetCurrentDirectoryA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryA
InitializeCriticalSectionAndSpinCount
SetFilePointer
RtlUnwind
GetModuleHandleA
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetTimeZoneInformation
HeapSize
RaiseException
DeleteFileA
Sections
.text Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 22KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Training Mode 3.0 Alpha7.2/TM ISO Builder/patch.xdelta