VirtualChannelEntry
_cgo_dummy_export
Overview
overview
3Static
static
3Client_RDP...64.zip
windows7-x64
1Client_RDP...64.zip
windows10-2004-x64
1modLicense...ost.js
windows7-x64
1modLicense...ost.js
windows10-2004-x64
1modLicense...ows.go
windows7-x64
3modLicense...ows.go
windows10-2004-x64
3modLicense.../wi.js
windows7-x64
1modLicense.../wi.js
windows10-2004-x64
1modLicense.../wi.go
windows7-x64
3modLicense.../wi.go
windows10-2004-x64
3modLicense.../wi.js
windows7-x64
1modLicense.../wi.js
windows10-2004-x64
1modLicense.../wi.js
windows7-x64
1modLicense.../wi.js
windows10-2004-x64
1modLicense.../wi.js
windows7-x64
1modLicense.../wi.js
windows10-2004-x64
1modLicense.../wi.js
windows7-x64
1modLicense.../wi.js
windows10-2004-x64
1modLicense.../wi.js
windows7-x64
1modLicense.../wi.js
windows10-2004-x64
1modLicense.../wi.js
windows7-x64
1modLicense.../wi.js
windows10-2004-x64
1modLicense.../wi.go
windows7-x64
3modLicense.../wi.go
windows10-2004-x64
3modLicense.../wi.js
windows7-x64
1modLicense.../wi.js
windows10-2004-x64
1modLicense.../wi.go
windows7-x64
3modLicense.../wi.go
windows10-2004-x64
3modLicense...ICENSE
windows7-x64
1modLicense...ICENSE
windows10-2004-x64
1modLicense...ICENSE
windows7-x64
1modLicense...ICENSE
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Client_RDPRelativeInput_Windows_x86_64.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Client_RDPRelativeInput_Windows_x86_64.zip
Resource
win10v2004-20240221-en
Behavioral task
behavioral3
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/windows/host/host.js
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/windows/host/host.js
Resource
win10v2004-20240221-en
Behavioral task
behavioral5
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/windows/host/windows.go
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/windows/host/windows.go
Resource
win10v2004-20240221-en
Behavioral task
behavioral7
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win10v2004-20240221-en
Behavioral task
behavioral9
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.go
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.go
Resource
win10v2004-20240221-en
Behavioral task
behavioral11
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win10v2004-20240221-en
Behavioral task
behavioral13
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win7-20240215-en
Behavioral task
behavioral14
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win10v2004-20240221-en
Behavioral task
behavioral15
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win7-20240221-en
Behavioral task
behavioral16
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win10v2004-20240221-en
Behavioral task
behavioral17
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win7-20240221-en
Behavioral task
behavioral18
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win10v2004-20240221-en
Behavioral task
behavioral19
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win10v2004-20240221-en
Behavioral task
behavioral21
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win7-20240221-en
Behavioral task
behavioral22
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win10v2004-20240221-en
Behavioral task
behavioral23
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.go
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.go
Resource
win10v2004-20240221-en
Behavioral task
behavioral25
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win7-20240220-en
Behavioral task
behavioral26
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.js
Resource
win10v2004-20240221-en
Behavioral task
behavioral27
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.go
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/TKMAX777/RDPRelativeInput/wi.go
Resource
win10v2004-20240221-en
Behavioral task
behavioral29
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/go-ole/go-ole/LICENSE
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/go-ole/go-ole/LICENSE
Resource
win10v2004-20240221-en
Behavioral task
behavioral31
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/lxn/win/LICENSE
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
modLicenses/github.com/TKMAX777/RDPRelativeInput/modLicenses/github.com/lxn/win/LICENSE
Resource
win10v2004-20240221-en
Target
Client_RDPRelativeInput_Windows_x86_64.zip
Size
2.6MB
MD5
f1fc763c9d9e6533756e8569e72a985b
SHA1
24b2f2282162cd5c819c04db2f54f9d1c720a54e
SHA256
024e98322506dfb562cc5a428229ca8507e1b8a2f4635be757b29398a94470d6
SHA512
5924f72c86d752054c0f9621ed05a1b975e168a608bb2698019d61f6d489f21396fdb1fdcbe920293c7cce442e596c5cafd6fbfc652a3081847fed6630f2d4d6
SSDEEP
49152:OCV52Sgo2LXgTCmJBohnFVN3Hlmegh7hdyOJIhM6qbJRcBba8OmJ6K/HPJZVg+5:OCV52SglXACmJaFb3HMh9drJL6qbJSRD
Checks for missing Authenticode signature.
resource |
---|
unpack001/RelativeInput.dll |
unpack001/RelativeInputClient.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
AddVectoredExceptionHandler
CloseHandle
CreateEventA
CreateFileA
CreateIoCompletionPort
CreateThread
CreateWaitableTimerExW
DeleteCriticalSection
DuplicateHandle
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsW
GetConsoleMode
GetEnvironmentStringsW
GetLastError
GetProcAddress
GetProcessAffinityMask
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetThreadContext
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
MultiByteToWideChar
PostQueuedCompletionStatus
ResumeThread
SetConsoleCtrlHandler
SetErrorMode
SetEvent
SetProcessPriorityBoost
SetThreadContext
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SuspendThread
SwitchToThread
TlsGetValue
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_beginthread
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
memcpy
realloc
strerror
strlen
strncmp
vfprintf
wcslen
VirtualChannelEntry
_cgo_dummy_export
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
WriteFile
WriteConsoleW
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
PostQueuedCompletionStatus
LoadLibraryA
LoadLibraryW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetEnvironmentStringsW
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ