TinyMan[.]RC[.]v1[.]4[.]Rage[.]update[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

TinyMan.RC.v1.4.Rage.update.rar
Size

1.2MB
MD5

5c3c13982f096a23c946fb5c86f27585
SHA1

f68657de5fa180c42506315e93032e4efbe3c5dc
SHA256

d0345af74123942d6ac52b5c65f134d7eb0d0fdcc93e54c80ea4794260c4b32f
SHA512

4558b1fa1b6e105fcf0eb695cd2bc72e8c29bf94f3f30107c923ad99d4ea6f9dc076c63318397f96b1db38b778b862e303e855775a4abf51e1591467ba58db31
SSDEEP

24576:YKArTv2WWuaGOsutHI/iIKDBak3UPl9+60fWhIJwSwe9K9x:YH72WWuaGOVmi53Ud9+NxJwdwK9x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TinyMan RC v1.4 Rage update/TinyMan RC v1.4 Rage update.exe

Files

TinyMan.RC.v1.4.Rage.update.rar
.rar
TinyMan RC v1.4 Rage update/Run me if the cheat not working.bat
TinyMan RC v1.4 Rage update/TinyMan RC v1.4 Rage update.exe
.exe windows:6 windows x64 arch:x64

64d2a76be8bfe1630244e3bceb0ec1f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

PlaySoundA

kernel32

MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
QueryPerformanceCounter
ReadFile
WriteFile
TerminateProcess
CreateMutexA
CreateFileW
OpenProcess
Sleep
CreateThread
GetConsoleWindow
FormatMessageA
AreFileApisANSI
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
CloseHandle
Process32Next
CreateFileA
GetLastError
CreateToolhelp32Snapshot
GetModuleHandleA
GetCurrentDirectoryA
VirtualAlloc
DeviceIoControl
VirtualFree
Process32First
GetModuleFileNameA
GetProcAddress
InitializeSListHead
LocalFree

user32

GetAsyncKeyState
GetWindow
GetWindowThreadProcessId
SetClipboardData
GetClipboardData
EmptyClipboard
ScreenToClient
GetActiveWindow
LoadCursorA
GetCapture
GetKeyState
UpdateWindow
RegisterClassExA
ClientToScreen
SetCapture
PostQuitMessage
PeekMessageA
LoadIconA
CloseClipboard
OpenClipboard
GetCursorPos
mouse_event
SetCursorPos
CreateWindowExA
ReleaseCapture
DefWindowProcA
TranslateMessage
GetForegroundWindow
GetClientRect
DispatchMessageA
GetWindowRect
SetWindowPos
keybd_event
GetSystemMetrics
ShowWindow
SetCursor
SetWindowLongA
MessageBoxA

advapi32

DeleteService
ControlService
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
StartServiceA

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?_Xbad_alloc@std@@YAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ

ntdll

NtQuerySystemInformation

imm32

ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

dwmapi

DwmExtendFrameIntoClientArea

d3d9

Direct3DCreate9Ex

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcmp
memcpy
__std_exception_destroy
memmove
__std_exception_copy
__std_terminate
memset
_CxxThrowException
__C_specific_handler
__current_exception_context
__current_exception
strstr
memchr

api-ms-win-crt-runtime-l1-1-0

exit
system
terminate
_configure_narrow_argv
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback
_c_exit
_initialize_onexit_table
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-stdio-l1-1-0

__p__commode
fclose
fflush
fgetc
fputc
__stdio_common_vsprintf_s
fwrite
fgetpos
setvbuf
__stdio_common_vsscanf
__stdio_common_vsprintf
_wfopen
ungetc
fsetpos
fseek
fread
ftell
_get_stream_buffer_pointers
_set_fmode
_fseeki64

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc
_set_new_mode
_callnewh
realloc

api-ms-win-crt-filesystem-l1-1-0

_lock_file
remove
rename
_unlock_file

api-ms-win-crt-string-l1-1-0

strcmp
strncpy
_stricmp

api-ms-win-crt-utility-l1-1-0

qsort
srand
rand

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
_configthreadlocale

api-ms-win-crt-math-l1-1-0

powf
fmodf
ceilf
sinf
sqrtf
atan2f
acosf
__setusermatherr
cosf
tanf

Sections

.text
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 315KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 632B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TinyMan RC v1.4 Rage update/banner
.png

Sharing

General

Malware Config

Signatures

Files

64d2a76be8bfe1630244e3bceb0ec1f4

Headers

DLL Characteristics

File Characteristics

Imports

winmm

kernel32

user32

advapi32

msvcp140

ntdll

imm32

dwmapi

d3d9

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 383KB - Virtual size: 383KB

.rdata Size: 1.6MB - Virtual size: 1.6MB

.data Size: 3KB - Virtual size: 8KB

.pdata Size: 13KB - Virtual size: 13KB

.rsrc Size: 315KB - Virtual size: 314KB

.reloc Size: 1024B - Virtual size: 632B

.text
Size: 383KB - Virtual size: 383KB

.rdata
Size: 1.6MB - Virtual size: 1.6MB

.data
Size: 3KB - Virtual size: 8KB

.pdata
Size: 13KB - Virtual size: 13KB

.rsrc
Size: 315KB - Virtual size: 314KB

.reloc
Size: 1024B - Virtual size: 632B