EditOnRelease (1)[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
EditOnRelease (1).dll
Size 399KB
Sample240518-x86gpscb53
SHA256 c82d3d7c8a22579ee4db00f9c5da4b37fcf1adeb6bfe40ac33d6fc30b541d8ef
MD5 35c423a4ab28e9286d07aea525d6cbde
SHA1 573ddcb8b0f0254b9c2295f9b715ed32fc8bc22b
SHA512 5d7a6d256943f80c3d7bf46b4f73aafa73fb26a9dfb781f1035c26bf74994e3e4a28085f93cfbab5c7e7c0c6a544ab0a6efd174dd665728ca4368e773b8ac6fc
SSDEEP 6144:r6ZaNqZnhxM+w+xC7wX68hKyC6FeTVMy8lDnY/xoy2wzNnORWWh+9hqzIYNZ:r6+4nzM+wlwXERUDg2GNnLoI0Z
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
EditOnRelease (1).dll

File Explorer

EditOnRelease (1).dll

.dll 399KB

EditOnRelease (1).dll

IMPHASH 7dd15a51ea63317c4fe7c4c953af0765
SHA256 c82d3d7c8a22579ee4db00f9c5da4b37fcf1adeb6bfe40ac33d6fc30b541d8ef
MD5 35c423a4ab28e9286d07aea525d6cbde
SHA1 573ddcb8b0f0254b9c2295f9b715ed32fc8bc22b
SHA512 5d7a6d256943f80c3d7bf46b4f73aafa73fb26a9dfb781f1035c26bf74994e3e4a28085f93cfbab5c7e7c0c6a544ab0a6efd174dd665728ca4368e773b8ac6fc
SSDEEP 6144:r6ZaNqZnhxM+w+xC7wX68hKyC6FeTVMy8lDnY/xoy2wzNnORWWh+9hqzIYNZ:r6+4nzM+wlwXERUDg2GNnLoI0Z
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

307448

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Antogamer\source\repos\SpawnCheatManager\x64\Release\SpawnCheatManager.pdb

kernel32

GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetLocaleInfoA LoadLibraryA QueryPerformanceFrequency GetProcAddress FreeLibrary QueryPerformanceCounter GetModuleHandleW HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree Sleep GetCurrentProcessId GetCurrentThreadId OpenThread ResumeThread GetThreadContext SetThreadContext FlushInstructionCache VirtualProtect MultiByteToWideChar Thread32First Thread32Next GetSystemInfo VirtualAlloc VirtualFree VirtualQuery IsDebuggerPresent OutputDebugStringW RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent DeleteCriticalSection CreateThread GetCurrentThread GetSystemTimeAsFileTime InitializeSListHead GetProcessHeap GetLastError GetModuleHandleA GlobalAlloc SuspendThread InitializeCriticalSectionEx CreateToolhelp32Snapshot GetCurrentProcess CloseHandle

user32

MessageBoxA UnregisterClassW SetWindowLongPtrW CallWindowProcW SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard GetCursorPos SetCursorPos ReleaseCapture IsWindowUnicode GetClientRect SetCursor DefWindowProcW DestroyWindow CreateWindowExW RegisterClassExW GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture

msvcp140

?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?good@ios_base@std@@QEBA_NXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?uncaught_exceptions@std@@YAHXZ ?_Xlength_error@std@@YAXPEBD@Z ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

imm32

ImmReleaseContext ImmSetCandidateWindow ImmGetContext ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp memchr __std_exception_destroy __std_exception_copy __vcrt_GetModuleFileNameW __std_type_info_destroy_list _CxxThrowException __C_specific_handler_noexcept __C_specific_handler memmove memset memcpy strstr __std_terminate __vcrt_LoadLibraryExW

api-ms-win-crt-stdio-l1-1-0

fread fflush __stdio_common_vfprintf fwrite _wfopen __stdio_common_vsprintf fseek __acrt_iob_func fclose ftell __stdio_common_vsscanf

api-ms-win-crt-heap-l1-1-0

_callnewh calloc malloc realloc free

api-ms-win-crt-convert-l1-1-0

strtol strtoul

api-ms-win-crt-string-l1-1-0

strcat_s strcpy_s strncmp strcmp

api-ms-win-crt-math-l1-1-0

fmodf acosf powf cosf ceilf ldexp sqrtf sinf

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv _initterm_e _initialize_onexit_table _register_onexit_function _initterm _cexit _seh_filter_dll _crt_atexit _execute_onexit_table _invalid_parameter_noinfo_noreturn _initialize_narrow_environment

api-ms-win-crt-utility-l1-1-0

qsort