C:\Users\Antogamer\source\repos\SpawnCheatManager\x64\Release\SpawnCheatManager.pdb
Static task
static1
Behavioral task
behavioral1
Sample
EditOnRelease (1).dll
Resource
android-33-x64-arm64-20240514-en
General
-
Target
EditOnRelease (1).dll
-
Size
399KB
-
MD5
35c423a4ab28e9286d07aea525d6cbde
-
SHA1
573ddcb8b0f0254b9c2295f9b715ed32fc8bc22b
-
SHA256
c82d3d7c8a22579ee4db00f9c5da4b37fcf1adeb6bfe40ac33d6fc30b541d8ef
-
SHA512
5d7a6d256943f80c3d7bf46b4f73aafa73fb26a9dfb781f1035c26bf74994e3e4a28085f93cfbab5c7e7c0c6a544ab0a6efd174dd665728ca4368e773b8ac6fc
-
SSDEEP
6144:r6ZaNqZnhxM+w+xC7wX68hKyC6FeTVMy8lDnY/xoy2wzNnORWWh+9hqzIYNZ:r6+4nzM+wlwXERUDg2GNnLoI0Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EditOnRelease (1).dll
Files
-
EditOnRelease (1).dll.dll windows:6 windows x64 arch:x64
7dd15a51ea63317c4fe7c4c953af0765
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetModuleHandleW
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
Sleep
GetCurrentProcessId
GetCurrentThreadId
OpenThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
MultiByteToWideChar
Thread32First
Thread32Next
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
IsDebuggerPresent
OutputDebugStringW
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
DeleteCriticalSection
CreateThread
GetCurrentThread
GetSystemTimeAsFileTime
InitializeSListHead
GetProcessHeap
GetLastError
GetModuleHandleA
GlobalAlloc
SuspendThread
InitializeCriticalSectionEx
CreateToolhelp32Snapshot
GetCurrentProcess
CloseHandle
user32
MessageBoxA
UnregisterClassW
SetWindowLongPtrW
CallWindowProcW
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
IsWindowUnicode
GetClientRect
SetCursor
DefWindowProcW
DestroyWindow
CreateWindowExW
RegisterClassExW
GetKeyState
GetMessageExtraInfo
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetKeyboardLayout
GetForegroundWindow
LoadCursorW
SetCapture
msvcp140
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?good@ios_base@std@@QEBA_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exceptions@std@@YAHXZ
?_Xlength_error@std@@YAXPEBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
imm32
ImmReleaseContext
ImmSetCandidateWindow
ImmGetContext
ImmSetCompositionWindow
d3dcompiler_47
D3DCompile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcmp
memchr
__std_exception_destroy
__std_exception_copy
__vcrt_GetModuleFileNameW
__std_type_info_destroy_list
_CxxThrowException
__C_specific_handler_noexcept
__C_specific_handler
memmove
memset
memcpy
strstr
__std_terminate
__vcrt_LoadLibraryExW
api-ms-win-crt-stdio-l1-1-0
fread
fflush
__stdio_common_vfprintf
fwrite
_wfopen
__stdio_common_vsprintf
fseek
__acrt_iob_func
fclose
ftell
__stdio_common_vsscanf
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
malloc
realloc
free
api-ms-win-crt-convert-l1-1-0
strtol
strtoul
api-ms-win-crt-string-l1-1-0
strcat_s
strcpy_s
strncmp
strcmp
api-ms-win-crt-math-l1-1-0
fmodf
acosf
powf
cosf
ceilf
ldexp
sqrtf
sinf
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initterm_e
_initialize_onexit_table
_register_onexit_function
_initterm
_cexit
_seh_filter_dll
_crt_atexit
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
api-ms-win-crt-utility-l1-1-0
qsort
Sections
.text Size: 303KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 604B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ