C:\Users\Stowe\Documents\Projects\Project-Reboot-3.0\x64\Release\Project Reboot 3.0.pdb
Static task
static1
1 signatures
General
-
Target
Project_Reboot_3.0.dll
-
Size
2.5MB
-
MD5
845e5734c552eaf4adf59c804180f1fa
-
SHA1
07f6faceae5b7384243e7f359cb141f902f46761
-
SHA256
7febc6118437f7ac85a4831268248bb8553bc7c91812b3b7e0e334aa8bcc7417
-
SHA512
2ff631576164a16d85f5c90292a238f1c802692d06d3a6bbcac655e36fdc2b46f43f973e1134a89cbb910529f8f1e9b34efa493b176e11ceba459928686b50f5
-
SSDEEP
49152:emYEz0WlXVEPCUPb+YXf7gZ59MfkWzidg6tE/ROniFyjZ5m23mWfRBshJL3blEGi:mdCFUI34e6ytZ
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Project_Reboot_3.0.dll
Files
-
Project_Reboot_3.0.dll.dll windows:6 windows x64 arch:x64
8a55cd702f5fb7c417b8a65554acc536
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
CreateWindowExW
UnregisterClassW
RegisterClassExW
ShowWindow
DispatchMessageW
PeekMessageW
TranslateMessage
PostQuitMessage
UpdateWindow
MessageBoxA
GetKeyState
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
LoadCursorW
SetCapture
SetCursor
GetClientRect
GetWindowRect
DefWindowProcW
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
ScreenToClient
SetClipboardData
kernel32
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
VirtualFree
GetStdHandle
WriteConsoleA
WriteFile
VirtualAlloc
GetDynamicTimeZoneInformation
GetCurrentThreadId
GetConsoleMode
GetCurrentProcessId
SuspendThread
HeapAlloc
GetCurrentThread
GetModuleHandleW
VirtualProtect
SetConsoleTitleA
HeapCreate
HeapReAlloc
Sleep
GetFileAttributesA
GetThreadContext
RtlCaptureContext
CloseHandle
QueryPerformanceCounter
CreateThread
RtlLookupFunctionEntry
SetThreadContext
HeapFree
RtlVirtualUnwind
GetCurrentProcess
GetModuleHandleA
GetSystemTimeAsFileTime
FlushInstructionCache
CreateToolhelp32Snapshot
Thread32First
VirtualQuery
Thread32Next
FreeLibrary
GetLocaleInfoEx
FormatMessageA
LocalFree
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
AreFileApisANSI
SleepEx
GetSystemDirectoryA
GetCurrentDirectoryW
GetLastError
SetLastError
FormatMessageW
MoveFileExA
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
WaitForSingleObjectEx
GetSystemInfo
VerSetConditionMask
OpenThread
GetProcAddress
ResumeThread
QueryPerformanceFrequency
IsBadReadPtr
GlobalUnlock
WideCharToMultiByte
GlobalLock
LoadLibraryA
GlobalFree
GlobalAlloc
SleepConditionVariableSRW
GetEnvironmentVariableA
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VerifyVersionInfoW
CreateFileA
GetFileSizeEx
WakeAllConditionVariable
MultiByteToWideChar
AcquireSRWLockExclusive
AllocConsole
ReleaseSRWLockExclusive
ws2_32
WSACleanup
WSAStartup
socket
inet_pton
WSAIoctl
setsockopt
ntohs
send
htons
gethostname
ioctlsocket
sendto
recvfrom
recv
getsockopt
freeaddrinfo
getsockname
getaddrinfo
WSACloseEvent
getpeername
ntohl
WSACreateEvent
listen
WSAEnumNetworkEvents
WSAEventSelect
WSAResetEvent
WSAWaitForMultipleEvents
WSAGetLastError
__WSAFDIsSet
htonl
connect
select
bind
closesocket
WSASetLastError
accept
advapi32
CryptImportKey
CryptEncrypt
CryptDestroyKey
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
crypt32
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CryptQueryObject
CertGetNameStringA
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertAddCertificateContextToStore
CertFindExtension
CertOpenStore
imm32
ImmGetContext
ImmSetCompositionWindow
ImmReleaseContext
ImmSetCandidateWindow
ImmAssociateContextEx
msvcp140
?_Winerror_map@std@@YAHH@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??Bios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@PEAV32@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?sync_with_stdio@ios_base@std@@SA_N_N@Z
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_signal
_Mbrtowc
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$numpunct@D@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Mtx_destroy_in_situ
_Mtx_lock
_Mtx_init_in_situ
_Thrd_id
_Xtime_get_ticks
_Thrd_join
_Mtx_unlock
_Cnd_destroy_in_situ
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??1_Locinfo@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
_Strxfrm
?id@?$ctype@_W@std@@2V0locale@2@A
?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
_Strcoll
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?narrow@?$ctype@_W@std@@QEBAPEB_WPEB_W0DPEAD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?tolower@?$ctype@D@std@@QEBADD@Z
?_Getcoll@_Locinfo@std@@QEBA?AU_Collvec@@XZ
?uncaught_exceptions@std@@YAHXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?good@ios_base@std@@QEBA_NXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
d3d9
Direct3DCreate9
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_destroy_list
_CxxThrowException
__std_terminate
strstr
strchr
__std_exception_destroy
__std_exception_copy
_purecall
strrchr
memcpy
memset
memmove
memcmp
memchr
__current_exception
__current_exception_context
__C_specific_handler
api-ms-win-crt-stdio-l1-1-0
_wfopen
fseek
__stdio_common_vfprintf
__stdio_common_vsprintf
fread
__stdio_common_vsscanf
fclose
_lseeki64
_open
fopen
fflush
__acrt_iob_func
fgets
_close
_write
__stdio_common_vsnprintf_s
_read
feof
fputs
ftell
freopen_s
fwrite
__stdio_common_vswprintf
_fsopen
__stdio_common_vsprintf_s
fputc
__stdio_common_vswprintf_s
_get_stream_buffer_pointers
_fseeki64
fsetpos
ungetc
setvbuf
fgetpos
fgetc
api-ms-win-crt-string-l1-1-0
isupper
isdigit
strncpy
strpbrk
strcmp
strspn
strcspn
tolower
toupper
strncmp
_strdup
api-ms-win-crt-utility-l1-1-0
qsort
srand
rand
api-ms-win-crt-heap-l1-1-0
free
malloc
calloc
realloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_cexit
_register_onexit_function
_initterm
_initterm_e
_initialize_onexit_table
terminate
__sys_errlist
_initialize_narrow_environment
__sys_nerr
_configure_narrow_argv
_invalid_parameter_noinfo
_beginthreadex
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_getpid
_errno
_execute_onexit_table
api-ms-win-crt-convert-l1-1-0
strtod
strtoll
strtof
strtoul
atoi
wcstombs
atof
strtoull
strtol
api-ms-win-crt-time-l1-1-0
_localtime64_s
_time64
strftime
_gmtime64
_gmtime64_s
api-ms-win-crt-math-l1-1-0
_dclass
_fdclass
_ldclass
acosf
ceilf
cosf
floor
_fdsign
fmaf
sqrtf
fmodf
_dsign
powf
roundf
_ldsign
floorf
sinf
fminf
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_fstat64
_unlock_file
_mkdir
_unlink
_stat64
_access
api-ms-win-crt-locale-l1-1-0
localeconv
___lc_codepage_func
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 589KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ