perlin%20noise%20mapping[.]7z

Sharing

Copy URL Twitter E-mail

General

Target

perlin%20noise%20mapping.7z
Size

184KB
MD5

aeab5f6cd8090f2486855058b93bb460
SHA1

6a59fecc59c7b19437c7f0e5cfc3b0ffd3685353
SHA256

a9c59c9deb61051d2241cba1916aa4d02204b6ec3ddf44e163e0e767ea3c730a
SHA512

917756fd0498983ab3e2c90d4c2558a7d4ef737120df7b301856285fc076c1e4a5063c2acfdc6fbb71b6798f1de5d0ca4bb14ceb3c639dec666d40094b134e81
SSDEEP

3072:Xk1rpGHAgkfYNsIE6wKyZDRJxnxY/9Va1wiEUXWJC3Hi6BwNvkdCP:XaKvPNsIE6zUD7xnxE9Va1wiEWWJCa7

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/perlin noise mapping/Height mapping/Height mapping/bin/Debug/Height mapping.exe
unpack001/perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/Height mapping.exe
unpack001/perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/TempPE/My Project.Resources.Designer.vb.dll

Files

perlin%20noise%20mapping.7z
.7z
perlin noise mapping/Height mapping/.vs/Height mapping/v15/.suo
perlin noise mapping/Height mapping/.vs/Height mapping/v15/Server/sqlite3/storage.ide
perlin noise mapping/Height mapping/.vs/Height mapping/v15/Server/sqlite3/storage.ide-shm
perlin noise mapping/Height mapping/.vs/Height mapping/v15/Server/sqlite3/storage.ide-wal
perlin noise mapping/Height mapping/Height mapping.sln
perlin noise mapping/Height mapping/Height mapping.suo
perlin noise mapping/Height mapping/Height mapping/Color_Form.vb
perlin noise mapping/Height mapping/Height mapping/Form1.Designer.vb
perlin noise mapping/Height mapping/Height mapping/Form1.resx
.vbs
perlin noise mapping/Height mapping/Height mapping/Form1.vb
perlin noise mapping/Height mapping/Height mapping/Height mapping.vbproj
perlin noise mapping/Height mapping/Height mapping/Height mapping.vbproj.user
perlin noise mapping/Height mapping/Height mapping/My Project/Application.Designer.vb
perlin noise mapping/Height mapping/Height mapping/My Project/Application.myapp
perlin noise mapping/Height mapping/Height mapping/My Project/AssemblyInfo.vb
perlin noise mapping/Height mapping/Height mapping/My Project/Resources.Designer.vb
.vbs
perlin noise mapping/Height mapping/Height mapping/My Project/Resources.resx
.vbs
perlin noise mapping/Height mapping/Height mapping/My Project/Settings.Designer.vb
.vbs
perlin noise mapping/Height mapping/Height mapping/My Project/Settings.settings
perlin noise mapping/Height mapping/Height mapping/Resources.vb
.vbs
perlin noise mapping/Height mapping/Height mapping/bin/Debug/Height mapping.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\bbact\Downloads\perlin noise mapping\Height mapping\Height mapping\obj\x86\Debug\Height mapping.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
perlin noise mapping/Height mapping/Height mapping/bin/Debug/Height mapping.pdb
perlin noise mapping/Height mapping/Height mapping/bin/Debug/Height mapping.vshost.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

22/08/2007, 22:31

Not After

25/08/2012, 07:00

Subject

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:01:cf:3e:00:00:00:00:00:0f
Certificate

Issuer

CN=Microsoft Code Signing PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

07/12/2009, 22:40

Not After

07/03/2011, 22:40

Subject

CN=Microsoft Corporation,OU=MOPR,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

Issuer

CN=Microsoft Root Authority,OU=Copyright (c) 1997 Microsoft Corp.+OU=Microsoft Corporation

Not Before

16/09/2006, 01:04

Not After

15/09/2019, 07:00

Subject

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

61:06:94:2d:00:00:00:00:00:09
Certificate

Issuer

CN=Microsoft Timestamping PCA,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

25/07/2008, 19:02

Not After

25/07/2013, 19:12

Subject

CN=Microsoft Time-Stamp Service,OU=MOPR+OU=nCipher DSE ESN:7A82-688A-9F92,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

69:7d:56:0d:a3:fe:3b:5c:0d:47:01:ed:dc:fa:ab:ea:ea:68:9c:9e
Signer

Actual PE Digest

69:7d:56:0d:a3:fe:3b:5c:0d:47:01:ed:dc:fa:ab:ea:ea:68:9c:9e

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\dd\vsproject\vshost\vshost32\objr\i386\vshost32.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
perlin noise mapping/Height mapping/Height mapping/bin/Debug/Height mapping.xml
perlin noise mapping/Height mapping/Height mapping/bin/Debug/color_scheme.txt
perlin noise mapping/Height mapping/Height mapping/bin/Debugcolor_scheme.txt
perlin noise mapping/Height mapping/Height mapping/map algorithms.vb
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/DesignTimeResolveAssemblyReferences.cache
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/DesignTimeResolveAssemblyReferencesInput.cache
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/Height mapping.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\bbact\Downloads\perlin noise mapping\Height mapping\Height mapping\obj\x86\Debug\Height mapping.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/Height mapping.pdb
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/Height mapping.vbproj.CoreCompileInputs.cache
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/Height mapping.vbproj.FileListAbsolute.txt
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/Height mapping.vbproj.GenerateResource.cache
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/Height mapping.vbprojAssemblyReference.cache
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/Height mapping.xml
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/Height_mapping.Form1.resources
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/Height_mapping.Resources.resources
perlin noise mapping/Height mapping/Height mapping/obj/x86/Debug/TempPE/My Project.Resources.Designer.vb.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
perlin noise mapping/Height mapping/Height mapping/perlin.vb
.vbs

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 40KB - Virtual size: 39KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Code Sign

2e:ab:11:dc:50:ff:5c:9d:cb:c0Certificate

Extended Key Usages

Key Usages

61:01:cf:3e:00:00:00:00:00:0fCertificate

Extended Key Usages

Key Usages

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2Certificate

Extended Key Usages

Key Usages

61:06:94:2d:00:00:00:00:00:09Certificate

Extended Key Usages

Key Usages

69:7d:56:0d:a3:fe:3b:5c:0d:47:01:ed:dc:fa:ab:ea:ea:68:9c:9eSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 40KB - Virtual size: 39KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 5KB - Virtual size: 5KB

.rsrc Size: 1024B - Virtual size: 776B

.reloc Size: 512B - Virtual size: 12B

.text
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

2e:ab:11:dc:50:ff:5c:9d:cb:c0
Certificate

61:01:cf:3e:00:00:00:00:00:0f
Certificate

6a:0b:99:4f:c0:00:25:ab:11:db:45:1f:58:7a:67:a2
Certificate

61:06:94:2d:00:00:00:00:00:09
Certificate

69:7d:56:0d:a3:fe:3b:5c:0d:47:01:ed:dc:fa:ab:ea:ea:68:9c:9e
Signer

.text
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 40KB - Virtual size: 39KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 1024B - Virtual size: 776B

.reloc
Size: 512B - Virtual size: 12B