risepro | 2024-05-09_6166eb43b1ecc82b47d7742221c9a7b4_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-09_6166eb43b1ecc82b47d7742221c9a7b4_magniber
Size

4.6MB
MD5

6166eb43b1ecc82b47d7742221c9a7b4
SHA1

35e383d1cea674fe22b84613b8bdfac7c8272c74
SHA256

041cb261cbbadcf605c78c72f8e24f8894b9d9f93ab9a1e84d44d9b5d1b582f6
SHA512

b6532329c43ee51ea393b34da2c3bc796d4aee6b14a9522a2449c5db223a450edb0a0f2b0e6e2ea7bbb25189ea3e3abb30578e8627ad6fa716efb05f1719e08c
SSDEEP

98304:OBCPpHqZ713XPvZGEh+KM9cAGlmnGYAAyJa2J1QaSH:OBastXPvZGEh+KM9cAZGYAVT

Score

10^/10

risepro

Malware Config

Signatures

Risepro family
risepro

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-09_6166eb43b1ecc82b47d7742221c9a7b4_magniber

Files

2024-05-09_6166eb43b1ecc82b47d7742221c9a7b4_magniber
.exe windows:6 windows x86 arch:x86

db8c5272cda2417a964062d1d96c4b07

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\SkullGirls.pdb

Imports

ws2_32

htonl
htons
ntohs
WSAStartup
ntohl
WSACleanup

winmm

timeGetTime
timeBeginPeriod
timeEndPeriod
PlaySoundW

dbghelp

MiniDumpWriteDump

d3d9

Direct3DCreate9

dinput8

DirectInput8Create

xinput9_1_0

XInputGetState

d3dx9_43

D3DXCreateFontW
D3DXCreateTextureFromFileInMemoryEx
D3DXCompileShader

tolk

Tolk_Unload
Tolk_Load
Tolk_HasSpeech
Tolk_Output
Tolk_HasBraille

steam_api

SteamAPI_Init
SteamAPI_RestartAppIfNecessary
SteamAPI_RunCallbacks
SteamInternal_CreateInterface
SteamAPI_Shutdown
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamInternal_FindOrCreateUserInterface
SteamAPI_GetHSteamUser
SteamInternal_ContextInit
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallResult

kernel32

SetStdHandle
IsValidCodePage
GetACP
GetTimeZoneInformation
DeleteFileW
HeapReAlloc
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
GetFileType
GetStringTypeW
FreeLibraryAndExitThread
ExitThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
FindClose
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateDirectoryW
GetFileAttributesExW
MoveFileExW
CopyFileW
CloseHandle
CreateThread
EnterCriticalSection
ReleaseSemaphore
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
DeleteCriticalSection
CreateSemaphoreW
OutputDebugStringA
GetModuleFileNameA
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
FormatMessageA
Sleep
LoadLibraryExW
LocalFree
ReadFile
GetFileSizeEx
GetStdHandle
WriteFile
GetModuleHandleExW
TerminateProcess
GetModuleFileNameW
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
CreatePipe
CreateFileW
FreeEnvironmentStringsW
ResumeThread
GetOEMCP
CreateEventW
GetExitCodeThread
SetEvent
SetFilePointerEx
CreateProcessW
GetModuleHandleW
WideCharToMultiByte
GetEnvironmentStringsW
FlushFileBuffers
GetExitCodeProcess
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreExA
WaitForSingleObjectEx
LoadLibraryW
GetLocalTime
ExitProcess
GetCurrentProcessId
SetThreadExecutionState
IsDebuggerPresent
CheckRemoteDebuggerPresent
SetUnhandledExceptionFilter
CreateDirectoryA
InitializeCriticalSectionEx
DecodePointer
VirtualFree
VirtualAlloc
SleepConditionVariableCS
WakeAllConditionVariable
InitializeConditionVariable
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalAlloc
GlobalLock
GlobalUnlock
GetUserDefaultLCID
DebugBreak
GetSystemTimeAsFileTime
GetTempPathW
LCMapStringEx
MultiByteToWideChar
EncodePointer
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetCPInfo
ResetEvent
UnhandledExceptionFilter
IsProcessorFeaturePresent
HeapSize
GetCommandLineA
GetCommandLineW
GetProcessHeap
SetEnvironmentVariableW
SetEndOfFile
DuplicateHandle
WriteConsoleW
SetLastError
InitializeSListHead
GetStartupInfoW
OutputDebugStringW
InterlockedPushEntrySList
RtlUnwind
RaiseException

user32

SetWindowLongW
GetClientRect
LoadCursorW
SetCursor
DefWindowProcW
DestroyWindow
SetWindowPos
CreateWindowExW
ScreenToClient
CallNextHookEx
GetSystemMetrics
UnregisterClassW
RegisterClassExW
ShowWindow
OpenClipboard
ChangeDisplaySettingsW
DispatchMessageW
AdjustWindowRect
TrackMouseEvent
UnhookWindowsHookEx
TranslateMessage
SetCapture
SetWindowsHookExW
PostQuitMessage
EnumDisplaySettingsW
SystemParametersInfoW
UnregisterDeviceNotification
UpdateWindow
ReleaseCapture
LoadImageW
IsIconic
GetCursorPos
MessageBoxA
EnumDisplayDevicesW
EnumDisplaySettingsExW
SetClipboardData
EmptyClipboard
PeekMessageW
CloseClipboard
RegisterDeviceNotificationW

shell32

SHGetFolderPathW
SHGetFolderPathA

ole32

CoInitializeEx
CoUninitialize
CoInitialize
CoSetProxyBlanket
CoCreateInstance

oleaut32

SysAllocString
SysFreeString

advapi32

CryptAcquireContextA
CryptGenRandom
CryptReleaseContext

iphlpapi

GetIfEntry2
GetIfTable2Ex
FreeMibTable

Exports

Exports

ggpo_add_local_input
ggpo_add_player
ggpo_advance_frame
ggpo_close_session
ggpo_disconnect_player
ggpo_disconnect_spectator
ggpo_get_current_frame
ggpo_get_is_rollback
ggpo_get_last_confirmed_frame
ggpo_get_network_stats
ggpo_idle
ggpo_set_disconnect_notify_start
ggpo_set_disconnect_timeout
ggpo_set_frame_delay
ggpo_set_ggpo_logging
ggpo_start_session
ggpo_start_spectating
ggpo_start_synctest
ggpo_synchronize_input

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db8c5272cda2417a964062d1d96c4b07

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

winmm

dbghelp

d3d9

dinput8

xinput9_1_0

d3dx9_43

tolk

steam_api

kernel32

user32

shell32

ole32

oleaut32

advapi32

iphlpapi

Exports

Exports

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 103KB - Virtual size: 4.2MB

.rsrc Size: 71KB - Virtual size: 71KB

.reloc Size: 233KB - Virtual size: 232KB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 103KB - Virtual size: 4.2MB

.rsrc
Size: 71KB - Virtual size: 71KB

.reloc
Size: 233KB - Virtual size: 232KB