StreckSlottedV1[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

StreckSlottedV1.exe
Size

2.2MB
MD5

877a7d5a008c55df76894f0af7c4ed99
SHA1

b76dffd4b0e66ab7e1621b2c344c79cdccdf80a3
SHA256

a1fcb64b8dc75016bfe1bc7890161e54e93e0416e4b3a7da6fb89a14bf4cf0d5
SHA512

75c30202e630f517710de5370866f638570c63406d2a05c872ba0a6f2723601fc208c9cb38022ed23ef89ddbe0f22036f5cbd5444d7c428800f894df3fe90717
SSDEEP

49152:cfi9KLMEnhSZi/lZNyRK37nThhII772+ppggHHqJmmXXkk5kLLSSNNAH44VVyyrb:K3FnoiNyJ4m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
StreckSlottedV1.exe

Files

StreckSlottedV1.exe
.exe windows:6 windows x64 arch:x64

8a01dc06f6529083908976934dc7907a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\segamfle\Desktop\foof\StreckFortnite\Release\streckfortnite.pdb

Imports

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

kernel32

WideCharToMultiByte
GlobalUnlock
WriteFile
GetCommState
SetCommTimeouts
SetCommState
HeapFree
GetStdHandle
InitializeCriticalSectionEx
GetEnvironmentVariableA
GetTickCount64
GetLastError
HeapAlloc
DeleteCriticalSection
AllocConsole
VirtualFree
VirtualAlloc
CreateFileW
GetCurrentThreadId
GetTempPathW
ReadFile
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
LocalFree
FormatMessageA
GetLocaleInfoEx
GlobalFree
FindClose
GetFileAttributesExW
AreFileApisANSI
GetModuleHandleW
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
GlobalAlloc
QueryPerformanceCounter
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
MultiByteToWideChar
GetModuleHandleA
GlobalFindAtomA
GetCurrentProcessId
CloseHandle
CreateFileA
Process32NextW
GlobalAddAtomA
Sleep
CreateToolhelp32Snapshot
OutputDebugStringW
GlobalLock
DeviceIoControl
GetFileSizeEx
FindFirstFileW

user32

GetForegroundWindow
TrackMouseEvent
ClientToScreen
GetCapture
ScreenToClient
MonitorFromWindow
GetMessageExtraInfo
GetKeyState
ReleaseCapture
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetAsyncKeyState
UpdateWindow
LoadCursorW
PostQuitMessage
SetWindowLongW
TranslateMessage
SetLayeredWindowAttributes
PeekMessageW
SetCapture
GetMonitorInfoW
DispatchMessageW
ShowWindow
RegisterClassExW
SetWindowTextW
GetSystemMetrics
SetWindowPos
MessageBoxA
GetCursorPos
SetCursorPos
SetCursor
GetClientRect
GetDesktopWindow
IsWindowUnicode
GetWindowRect
DefWindowProcW

gdi32

GetStockObject

advapi32

RegQueryValueExW
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegSetKeyValueW
RegDeleteTreeW
RegCreateKeyW
RegOpenKeyW
RegOpenKeyExA

ole32

CoCreateGuid

msvcp140

??7ios_base@std@@QEBA_NXZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
??Bid@locale@std@@QEAA_KXZ
?_Incref@facet@locale@std@@UEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z
??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?good@ios_base@std@@QEBA_NXZ
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?_Xinvalid_argument@std@@YAXPEBD@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_id
_Query_perf_counter
_Xtime_get_ticks
_Thrd_join
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Xbad_alloc@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Random_device@std@@YAIXZ
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Syserror_map@std@@YAPEBDH@Z
_Thrd_detach
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??Bios_base@std@@QEBA_NXZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z

ntdll

NtQuerySystemInformation
RtlInitUnicodeString

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmReleaseContext
ImmSetCandidateWindow
ImmGetContext
ImmSetCompositionWindow

setupapi

SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA

ws2_32

recv
connect
WSACleanup
closesocket
send
inet_addr
WSAGetLastError
setsockopt
socket
sendto
recvfrom
htons
WSAStartup

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

winmm

PlaySoundW
PlaySoundA

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException
__intrinsic_setjmp
__C_specific_handler
__current_exception_context
memcmp
memchr
memset
memmove
memcpy
longjmp
strrchr
strstr
__std_terminate
__std_exception_destroy
__std_exception_copy
wcsstr
__current_exception

api-ms-win-crt-string-l1-1-0

strcpy_s
strncmp
strcmp
tolower
_stricmp
iscntrl
strncpy

api-ms-win-crt-stdio-l1-1-0

fflush
fclose
_get_stream_buffer_pointers
_fseeki64
fsetpos
ungetc
setvbuf
__acrt_iob_func
fgetpos
fwrite
fgetc
__stdio_common_vsprintf_s
fread
fputc
freopen
__stdio_common_vfprintf
__stdio_common_vsprintf
__p__commode
_set_fmode
__stdio_common_vsscanf

api-ms-win-crt-runtime-l1-1-0

_exit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm
_get_narrow_winmain_command_line
terminate
_set_app_type
_errno
_invalid_parameter_noinfo_noreturn
exit
_wassert
_seh_filter_exe
_cexit
abort
_initterm_e
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_beginthreadex

api-ms-win-crt-utility-l1-1-0

rand
srand
qsort

api-ms-win-crt-heap-l1-1-0

_set_new_mode
malloc
free
_callnewh

api-ms-win-crt-convert-l1-1-0

strtod
atof
strtoll
strtol
strtoull
wcstombs

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
localeconv
___lc_codepage_func

api-ms-win-crt-time-l1-1-0

clock
_time64

api-ms-win-crt-math-l1-1-0

sinf
powf
sqrt
fmodf
_dclass
_dsign
acosf
atan2
ceilf
__setusermatherr
cosf
sqrtf

api-ms-win-crt-filesystem-l1-1-0

_unlock_file
_lock_file
_wremove

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 477KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 626KB - Virtual size: 634KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a01dc06f6529083908976934dc7907a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d11

d3dcompiler_43

kernel32

user32

gdi32

advapi32

ole32

msvcp140

ntdll

dwmapi

imm32

setupapi

ws2_32

d3dx11_43

winmm

vcruntime140_1

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 477KB - Virtual size: 477KB

.data Size: 626KB - Virtual size: 634KB

.pdata Size: 48KB - Virtual size: 48KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 477KB - Virtual size: 477KB

.data
Size: 626KB - Virtual size: 634KB

.pdata
Size: 48KB - Virtual size: 48KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 3KB