2024-06-01_6954dd1f49cd1dcd69f12cb4dc62e715_megazord

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-01_6954dd1f49cd1dcd69f12cb4dc62e715_megazord
Size

8.0MB
MD5

6954dd1f49cd1dcd69f12cb4dc62e715
SHA1

2a3b6520a85d091b42e937dbd6c60a17c2008a24
SHA256

d1364da6bc1a6db0103a3b1bcbf84d9a6e539eb34a91cd65ba0d4b15af9945f2
SHA512

6e0fe10c10525fd7b87af3a2d7f8f49eaee73fef24c95889329d45fb79d4fe56265bfa3e64f3f31f751c3e1cc5a0d08bf9ce0dcdfa07471a95d2f2e8bf4f2ef3
SSDEEP

98304:7K3N/Uo7auHyFmjhmU7QCj70lzqxGA+K7A79Q8cRAJUWh00RamYLG9T6Vpl6MBDB:W0Id+UW6NRFU18

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-01_6954dd1f49cd1dcd69f12cb4dc62e715_megazord

Files

2024-06-01_6954dd1f49cd1dcd69f12cb4dc62e715_megazord
.exe windows:6 windows x64 arch:x64

4c9a67d37facef7cd250950b75352e90

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\dev\tauri\SL-Scene-Builder\src-tauri\target\release\deps\scene_builder.pdb

Imports

kernel32

TryAcquireSRWLockExclusive
GetModuleHandleW
InitializeSListHead
GetUserDefaultUILanguage
LCIDToLocaleName
IsDebuggerPresent
LoadLibraryW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetCurrentThreadId
WaitForSingleObject
FormatMessageW
HeapAlloc
lstrlenW
LoadLibraryA
HeapFree
CreateMutexA
WaitForSingleObjectEx
GetTempPathW
GetSystemTimeAsFileTime
GetCurrentThread
GetProcessHeap
GetLastError
FreeLibrary
CreateThread
WriteConsoleW
MultiByteToWideChar
GetFullPathNameW
ExitProcess
CopyFileExW
GetFinalPathNameByHandleW
RemoveDirectoryW
MoveFileExW
DeleteFileW
FindFirstFileW
CreateDirectoryW
CreateFileW
FindClose
FindNextFileW
ReleaseMutex
ReleaseSRWLockShared
AcquireSRWLockShared
HeapReAlloc
QueryPerformanceFrequency
GetFileAttributesW
GetModuleFileNameW
OutputDebugStringA
OutputDebugStringW
GetProcAddress
DeleteCriticalSection
CloseHandle
LoadLibraryExW
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
GetEnvironmentVariableW
SleepConditionVariableSRW
GetSystemInfo
Sleep
GetModuleHandleA
GetStdHandle
GetConsoleMode
GetFileInformationByHandleEx
GetFileInformationByHandle
EncodePointer
ReleaseSRWLockExclusive
WakeConditionVariable
WakeAllConditionVariable
AddVectoredExceptionHandler
SetThreadStackGuarantee
SwitchToThread
CreateWaitableTimerExW
SetWaitableTimer
QueryPerformanceCounter
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
SetLastError
GetCurrentDirectoryW
SetEnvironmentVariableW
GetCurrentProcess
AcquireSRWLockExclusive
GetCommandLineW
SetFileInformationByHandle
DuplicateHandle
SetFilePointerEx
TerminateProcess
GetCurrentProcessId
TlsFree

user32

ToUnicodeEx
GetKeyboardLayout
DestroyIcon
CreateIcon
VkKeyScanW
MapVirtualKeyExW
GetKeyState
ClientToScreen
LoadCursorW
MonitorFromRect
GetAsyncKeyState
GetKeyboardState
GetRawInputData
PostQuitMessage
ShowWindow
AppendMenuW
CreateMenu
CheckMenuItem
SetMenuItemInfoW
EnableMenuItem
PostMessageW
SetForegroundWindow
SetWindowDisplayAffinity
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
TrackMouseEvent
DestroyAcceleratorTable
ScreenToClient
CloseTouchInputHandle
MonitorFromPoint
EnumDisplayMonitors
TranslateAcceleratorW
SetCursor
IsProcessDPIAware
SendMessageW
CreateAcceleratorTableW
GetDC
DefWindowProcW
FlashWindowEx
GetCursorPos
SystemParametersInfoA
GetWindowLongPtrW
IsWindowVisible
MonitorFromWindow
GetMonitorInfoW
GetAncestor
GetMessageW
MapVirtualKeyW
GetUpdateRect
ClipCursor
GetClipCursor
ShowCursor
AdjustWindowRectEx
GetMenu
GetWindowRect
SetCapture
SetWindowLongPtrW
MsgWaitForMultipleObjectsEx
RegisterRawInputDevices
RegisterClassExW
RegisterWindowMessageA
PostThreadMessageW
SetWindowLongW
EnumChildWindows
GetSystemMenu
ValidateRect
GetWindowLongW
GetMessageA
GetClientRect
DestroyWindow
DispatchMessageW
TranslateMessage
PeekMessageW
GetTouchInputInfo
DispatchMessageA
RedrawWindow
SendInput
RegisterTouchWindow
GetSystemMetrics
IsWindow
CreateWindowExW
SetCursorPos
GetForegroundWindow
GetActiveWindow
IsIconic
SetMenu
ReleaseCapture
InvalidateRgn
GetWindowPlacement
SetWindowPlacement
ChangeDisplaySettingsExW
SetWindowPos

comctl32

DefSubclassProc
SetWindowSubclass
TaskDialogIndirect
RemoveWindowSubclass

ole32

CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal
CoTaskMemFree
OleInitialize
RegisterDragDrop
CoCreateInstance
RevokeDragDrop
CoTaskMemAlloc

shell32

DragQueryFileW
DragFinish
SHAppBarMessage
ShellExecuteW
SHCreateItemFromParsingName
SHGetKnownFolderPath

gdi32

CreateRectRgn
DeleteObject
GetDeviceCaps

dwmapi

DwmEnableBlurBehindWindow

oleaut32

SetErrorInfo
GetErrorInfo
SysStringLen
SysFreeString

uxtheme

SetWindowTheme

advapi32

SystemFunction036
RegGetValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventUnregister
EventWriteTransfer
EventSetInformation
EventRegister

bcrypt

BCryptGenRandom

ntdll

RtlNtStatusToDosError
NtReadFile
NtWriteFile
NtCreateFile

api-ms-win-crt-math-l1-1-0

floor
trunc
pow
roundf
round
__setusermatherr

api-ms-win-crt-string-l1-1-0

wcsncmp
_wcsicmp
strcpy_s
wcslen

api-ms-win-crt-convert-l1-1-0

wcstol
_ultow_s

api-ms-win-crt-runtime-l1-1-0

_c_exit
_get_initial_narrow_environment
_initterm
_seh_filter_exe
_cexit
_initialize_narrow_environment
__p___argv
_configure_narrow_argv
abort
__p___argc
_exit
terminate
_crt_atexit
_register_onexit_function
_set_app_type
_initialize_onexit_table
_initterm_e
_register_thread_local_exe_atexit_callback
exit

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
malloc
free
calloc

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 246KB - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 97KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4c9a67d37facef7cd250950b75352e90

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

comctl32

ole32

shell32

gdi32

dwmapi

oleaut32

uxtheme

advapi32

bcrypt

ntdll

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 5.1MB - Virtual size: 5.1MB

.rdata Size: 2.5MB - Virtual size: 2.5MB

.data Size: 1KB - Virtual size: 13KB

.pdata Size: 246KB - Virtual size: 245KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 97KB - Virtual size: 96KB

.reloc Size: 38KB - Virtual size: 38KB

.text
Size: 5.1MB - Virtual size: 5.1MB

.rdata
Size: 2.5MB - Virtual size: 2.5MB

.data
Size: 1KB - Virtual size: 13KB

.pdata
Size: 246KB - Virtual size: 245KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 97KB - Virtual size: 96KB

.reloc
Size: 38KB - Virtual size: 38KB