General

Malware Config

Signatures

Files

• 417106b96cbe860725c90700e349d7d852c845cef05450efa0946f0a1830b437.exe

  .dll windows:6 windows x64 arch:x64

  9a4c1d46ce5204579f3b15445fb1f9b9

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_DLL

  PDB Paths

  C:\Users\D0NN3T\Documents\workspace\chams\x64\Release\ImGui Standalone.pdb

  Imports

  d3d11

  D3D11CreateDeviceAndSwapChain

  opengl32

  wglGetProcAddress

  wglGetCurrentDC

  glGetString

  glGetIntegerv

  glPopMatrix

  glDepthRange

  glStencilOp

  glPopAttrib

  glEnable

  glVertex3f

  glEnd

  glLineWidth

  glStencilFunc

  glBlendFunc

  glColor4f

  glColorMask

  glBegin

  glDrawElements

  glDisable

  glPushMatrix

  glPushAttrib

  kernel32

  CreateEventW

  EnterCriticalSection

  LeaveCriticalSection

  WaitForSingleObjectEx

  RtlCaptureContext

  RtlLookupFunctionEntry

  RtlVirtualUnwind

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  TerminateProcess

  IsProcessorFeaturePresent

  IsDebuggerPresent

  MultiByteToWideChar

  GlobalAlloc

  GlobalFree

  GlobalLock

  WideCharToMultiByte

  GlobalUnlock

  GetModuleHandleA

  LoadLibraryA

  QueryPerformanceFrequency

  GetProcAddress

  VerSetConditionMask

  FreeLibrary

  QueryPerformanceCounter

  DisableThreadLibraryCalls

  CreateThread

  HeapFree

  GetCurrentProcess

  InitializeCriticalSectionEx

  ExitThread

  HeapSize

  Sleep

  GetLastError

  HeapReAlloc

  CloseHandle

  HeapAlloc

  HeapDestroy

  LocalFree

  DeleteCriticalSection

  GetProcessHeap

  WaitForSingleObject

  GetExitCodeThread

  HeapCreate

  VirtualProtect

  Thread32Next

  Thread32First

  GetCurrentThreadId

  SuspendThread

  ResumeThread

  CreateToolhelp32Snapshot

  GetThreadContext

  GetCurrentProcessId

  GetModuleHandleW

  FlushInstructionCache

  SetThreadContext

  OpenThread

  InitializeCriticalSectionAndSpinCount

  VirtualAlloc

  GetSystemInfo

  VirtualQuery

  GetSystemTimeAsFileTime

  InitializeSListHead

  OutputDebugStringW

  ResetEvent

  SetEvent

  VirtualFree

  user32

  GetForegroundWindow

  DefWindowProcA

  CreateWindowExA

  SetLayeredWindowAttributes

  SetFocus

  BringWindowToTop

  SetCapture

  SetCursor

  SetWindowLongW

  GetClientRect

  UnregisterClassA

  SetProcessDPIAware

  RegisterClassExA

  ReleaseCapture

  SetForegroundWindow

  IsIconic

  SetCursorPos

  ReleaseDC

  GetCursorPos

  TrackMouseEvent

  CloseClipboard

  EmptyClipboard

  GetClipboardData

  SetClipboardData

  ClientToScreen

  SetWindowLongA

  GetCapture

  ShowWindow

  WindowFromPoint

  GetMonitorInfoA

  SetWindowTextW

  ScreenToClient

  EnumDisplayMonitors

  MonitorFromWindow

  SetWindowPos

  GetDC

  DestroyWindow

  LoadCursorA

  GetKeyState

  AdjustWindowRectEx

  OpenClipboard

  IsChild

  DispatchMessageA

  GetAsyncKeyState

  TranslateMessage

  PeekMessageA

  PostQuitMessage

  UpdateWindow

  GetWindowLongW

  gdi32

  GetDeviceCaps

  advapi32

  ConvertSidToStringSidA

  GetTokenInformation

  GetLengthSid

  OpenProcessToken

  IsValidSid

  CopySid

  shell32

  ShellExecuteA

  imm32

  ImmGetContext

  ImmSetCompositionWindow

  ImmSetCandidateWindow

  ImmAssociateContextEx

  ImmReleaseContext

  d3dcompiler_43

  D3DCompile

  msvcp140

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z

  ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

  ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z

  ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ

  ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ

  ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

  ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z

  ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z

  ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z

  ?_Xout_of_range@std@@YAXPEBD@Z

  ?uncaught_exception@std@@YA_NXZ

  ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A

  ?_Xbad_function_call@std@@YAXXZ

  ?_Xlength_error@std@@YAXPEBD@Z

  urlmon

  URLDownloadToFileA

  userenv

  UnloadUserProfile

  wininet

  HttpSendRequestA

  InternetCloseHandle

  InternetReadFile

  InternetOpenA

  InternetSetOptionA

  HttpOpenRequestA

  InternetQueryOptionA

  HttpQueryInfoA

  InternetSetCookieA

  InternetConnectA

  vcruntime140_1

  __CxxFrameHandler4

  vcruntime140

  memchr

  __std_terminate

  strstr

  __C_specific_handler

  __std_exception_destroy

  __std_exception_copy

  __current_exception

  __current_exception_context

  memset

  _CxxThrowException

  __std_type_info_destroy_list

  memmove

  memcmp

  memcpy

  api-ms-win-crt-stdio-l1-1-0

  ftell

  __acrt_iob_func

  fflush

  fopen

  fclose

  fseek

  fwrite

  __stdio_common_vfprintf

  __stdio_common_vsscanf

  fread

  __stdio_common_vsprintf

  _wfopen

  api-ms-win-crt-string-l1-1-0

  strncmp

  strncpy

  isspace

  strcmp

  tolower

  isalnum

  api-ms-win-crt-utility-l1-1-0

  qsort

  api-ms-win-crt-heap-l1-1-0

  malloc

  free

  calloc

  _callnewh

  api-ms-win-crt-convert-l1-1-0

  strtoull

  strtoll

  strtod

  atof

  api-ms-win-crt-runtime-l1-1-0

  _seh_filter_dll

  _configure_narrow_argv

  _initialize_narrow_environment

  _initialize_onexit_table

  _register_onexit_function

  _execute_onexit_table

  _crt_atexit

  _cexit

  terminate

  _initterm

  _initterm_e

  _resetstkoflw

  _invalid_parameter_noinfo

  _errno

  _invalid_parameter_noinfo_noreturn

  api-ms-win-crt-locale-l1-1-0

  localeconv

  api-ms-win-crt-math-l1-1-0

  atan2f

  ceilf

  cosf

  _dclass

  powf

  sinf

  acosf

  sqrtf

  fmodf

  Sections

  .text

  Size: 580KB - Virtual size: 580KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 173KB - Virtual size: 172KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 14KB - Virtual size: 40KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 24KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 512B - Virtual size: 480B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ