C:\Users\PC\Desktop\COME BACK\Projects-Dev\Val-Ext\UM\x64\Release\BUILD\Hotm.pdb
Static task
static1
1 signatures
General
-
Target
valorant_dumped.exe
-
Size
1.1MB
-
MD5
ab6d74684e3a92d23f946f5294051f1c
-
SHA1
75465b2168b5559b5fbb3c76929d129bfb0ce085
-
SHA256
0548a0239443ba172db07252fec9be8dedba4a64da82637cd674bc39feec8ffe
-
SHA512
2ea97c2669c83b4084c6d63cffc801f8f593bd2f33b6fdd237551eb18393c2ba92f61d285007987cebc833d89de67b0af2e48f78e9c7a20722bb36ec057e27f6
-
SSDEEP
24576:rb7xWzx7gm3OXWw5fAKmjVAt9N1c6pmBN8zrTfnZ27/fVT:rbygm3OXWoAKmj4rjwWjnZS
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource valorant_dumped.exe
Files
-
valorant_dumped.exe.exe windows:6 windows x64 arch:x64
a0acf1cba236c3e48233e0a2b4c74266
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
MoveFileExA
WaitForSingleObjectEx
GetEnvironmentVariableA
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
GetFileSizeEx
DeviceIoControl
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
VerifyVersionInfoA
TerminateProcess
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
GetSystemDirectoryA
SleepEx
LeaveCriticalSection
EnterCriticalSection
FormatMessageA
LocalFree
CreateDirectoryA
DeleteCriticalSection
HeapDestroy
FreeLibrary
HeapSize
InitializeCriticalSectionEx
HeapFree
VerSetConditionMask
QueryPerformanceFrequency
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
SetUnhandledExceptionFilter
CheckRemoteDebuggerPresent
IsDebuggerPresent
CreateRemoteThread
GetConsoleWindow
WideCharToMultiByte
GetProcessHeap
VirtualProtectEx
HeapAlloc
CreateThread
HeapReAlloc
Process32FirstW
Process32Next
LoadLibraryA
CreateFileA
Process32NextW
GetLastError
Sleep
MultiByteToWideChar
CreateToolhelp32Snapshot
OpenProcess
OutputDebugStringA
GetStdHandle
GetCurrentProcess
SetConsoleTextAttribute
SetLastError
VirtualAlloc
CreateFileW
GetCurrentThreadId
GetTickCount
GetModuleFileNameA
GetTempPathW
UnhandledExceptionFilter
QueryPerformanceCounter
GetModuleHandleA
CloseHandle
GetProcAddress
GetCurrentProcessId
Process32First
VirtualFree
WriteProcessMemory
VirtualProtect
GetConsoleScreenBufferInfo
user32
FindWindowA
PeekMessageA
TranslateMessage
SetLayeredWindowAttributes
CreateWindowExA
GetForegroundWindow
MessageBoxA
GetWindowLongA
SetWindowLongA
GetAsyncKeyState
ShowWindow
GetSystemMetrics
SetWindowPos
DispatchMessageA
GetWindow
GetKeyState
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
GetCursorPos
RegisterClassExA
OpenClipboard
SetCursorPos
GetClientRect
SetCursor
ScreenToClient
LoadCursorA
ClientToScreen
advapi32
CryptGenRandom
RegCreateKeyW
RegDeleteTreeW
RegCloseKey
RegSetKeyValueW
OpenServiceA
QueryServiceStatusEx
OpenSCManagerA
RegQueryValueExA
CloseServiceHandle
RegOpenKeyA
GetTokenInformation
GetLengthSid
OpenProcessToken
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
RegOpenKeyW
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
ConvertSidToStringSidA
CopySid
IsValidSid
shell32
ShellExecuteA
msvcp140
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@PEBX@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@J@Z
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@K@Z
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Query_perf_frequency
?clog@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Throw_Cpp_error@std@@YAXH@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$ctype@D@std@@2V0locale@2@A
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Cnd_do_broadcast_at_thread_exit
_Thrd_sleep
_Query_perf_counter
_Thrd_detach
_Xtime_get_ticks
_Mtx_unlock
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?iword@ios_base@std@@QEAAAEAJH@Z
?xalloc@ios_base@std@@SAHXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xout_of_range@std@@YAXPEBD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?wcout@std@@3V?$basic_ostream@_WU?$char_traits@_W@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
ntdll
NtQuerySystemInformation
RtlInitUnicodeString
d3d9
Direct3DCreate9
imm32
ImmReleaseContext
ImmSetCandidateWindow
ImmGetContext
ImmSetCompositionWindow
normaliz
IdnToAscii
wldap32
ord200
ord30
ord301
ord79
ord35
ord33
ord143
ord27
ord26
ord22
ord41
ord50
ord45
ord60
ord211
ord32
ord46
ord217
crypt32
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore
CertFreeCertificateChain
ws2_32
getsockopt
setsockopt
socket
WSASetLastError
WSAIoctl
WSAStartup
WSACleanup
accept
getsockname
getpeername
htonl
listen
connect
htons
WSAGetLastError
send
recv
closesocket
ntohl
ioctlsocket
__WSAFDIsSet
select
getaddrinfo
freeaddrinfo
recvfrom
sendto
gethostname
bind
ntohs
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
strstr
__std_terminate
wcsstr
__std_exception_copy
__std_exception_destroy
strchr
__C_specific_handler
memcpy
strrchr
memmove
memcmp
memchr
__current_exception
__current_exception_context
_CxxThrowException
memset
api-ms-win-crt-stdio-l1-1-0
_fseeki64
_write
_close
_open
__p__commode
fflush
feof
fclose
fgetc
_get_stream_buffer_pointers
fputs
fopen
fgets
fputc
_set_fmode
fread
fwrite
_lseeki64
freopen
__acrt_iob_func
fsetpos
__stdio_common_vsscanf
__stdio_common_vsprintf
_wfopen
__stdio_common_vsprintf_s
fgetpos
fseek
ftell
_fileno
ungetc
__stdio_common_vsnprintf_s
_isatty
_read
__stdio_common_vfprintf
setvbuf
api-ms-win-crt-utility-l1-1-0
rand
srand
qsort
api-ms-win-crt-filesystem-l1-1-0
_fstat64
_access
_lock_file
_unlock_file
_stat64
remove
_wremove
_unlink
api-ms-win-crt-string-l1-1-0
strncmp
strcspn
_wcsicmp
tolower
strpbrk
_strdup
strcmp
isupper
strspn
strncpy
_stricmp
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64
api-ms-win-crt-runtime-l1-1-0
terminate
_beginthreadex
_getpid
_resetstkoflw
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_invalid_parameter_noinfo
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
strerror
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_errno
__sys_nerr
exit
system
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
_set_new_mode
_callnewh
realloc
api-ms-win-crt-convert-l1-1-0
strtoull
strtoll
atoi
strtoul
strtol
strtod
atof
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
_configthreadlocale
localeconv
api-ms-win-crt-math-l1-1-0
cosf
ceilf
atanf
fmodf
tanf
powf
sinf
sqrtf
_dclass
acosf
__setusermatherr
asinf
atan2f
floorf
Sections
.text Size: 816KB - Virtual size: 815KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 34KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ