C:\Users\mati\Desktop\vscode\submittool\client2\lvl-submit-tool-temp\src-tauri\target\release\deps\level_lifters_submit_lool.pdb
Static task
static1
General
-
Target
Level Lifters Submit Tool.exe
-
Size
8.0MB
-
MD5
10320a83ce67d6c5368976f5119f5af7
-
SHA1
fbee6961618b85d4d0a987fb27cf72e2d846cccf
-
SHA256
145402afd57a11b82d1f413a6a625221cd9e31c38d1ce8af451f1b311c098f23
-
SHA512
c728b40a26bdd4780572e3da57c39d2a13e36404f85a94924400d9a8f1909e6c43b01cf18078a311089e2cf123bee1a0d251f04d94900a9854ec8a24aaaf9e7d
-
SSDEEP
98304:jz3eL1FY4N5oLqpW5lXnmzCXg6GEQ3YaHKRsA+QPk8jZhtQ7mb37MF/GSZVtft9d:UU+iJht37I/GSZ19d
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Level Lifters Submit Tool.exe
Files
-
Level Lifters Submit Tool.exe.exe windows:6 windows x64 arch:x64
1615c04e43024eb014e295d513f9715c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
GetSystemDirectoryW
ReadFileEx
CreateNamedPipeW
GetFullPathNameW
ExitProcess
RtlUnwindEx
CopyFileExW
GetFinalPathNameByHandleW
GetFileAttributesW
GetModuleFileNameW
GetLastError
OutputDebugStringA
OutputDebugStringW
RtlPcToFileHeader
RaiseException
LoadLibraryExW
EncodePointer
CreateThread
DeleteCriticalSection
FreeLibrary
GetEnvironmentVariableW
GetWindowsDirectoryW
GetProcessHeap
HeapFree
HeapAlloc
CreateProcessW
WaitForSingleObject
DeleteFileW
FormatMessageW
FindFirstFileW
CreateDirectoryW
Sleep
GetModuleHandleA
GetFileInformationByHandle
SleepConditionVariableSRW
GetConsoleMode
GetFileInformationByHandleEx
CreateFileW
FindClose
FindNextFileW
ReleaseMutex
GetCurrentThread
InitializeProcThreadAttributeList
HeapReAlloc
QueryPerformanceFrequency
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
GetSystemTimeAsFileTime
GetTempPathW
WaitForSingleObjectEx
CreateMutexA
UpdateProcThreadAttribute
MultiByteToWideChar
WriteConsoleW
IsDebuggerPresent
LoadLibraryA
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
WakeConditionVariable
WakeAllConditionVariable
UnhandledExceptionFilter
GetCurrentThreadId
GetModuleHandleW
TryAcquireSRWLockExclusive
lstrlenW
GetUserDefaultUILanguage
LCIDToLocaleName
LoadLibraryW
TlsSetValue
GetProcAddress
CloseHandle
TerminateProcess
GetExitCodeProcess
ReleaseSRWLockShared
AcquireSRWLockShared
GetSystemInfo
SleepEx
WriteFileEx
GetCurrentProcessId
GetStdHandle
SetFilePointerEx
DuplicateHandle
SetFileInformationByHandle
GetCommandLineW
SetHandleInformation
ReleaseSRWLockExclusive
GetCurrentProcess
SetEnvironmentVariableW
GetEnvironmentStringsW
GetCurrentDirectoryW
SetLastError
RtlLookupFunctionEntry
RtlVirtualUnwind
RtlCaptureContext
QueryPerformanceCounter
SetWaitableTimer
CreateWaitableTimerExW
SwitchToThread
SetThreadStackGuarantee
CreateIoCompletionPort
AddVectoredExceptionHandler
GetQueuedCompletionStatusEx
CompareStringOrdinal
PostQueuedCompletionStatus
DeleteProcThreadAttributeList
SetFileCompletionNotificationModes
FreeEnvironmentStringsW
AcquireSRWLockExclusive
TlsFree
comctl32
RemoveWindowSubclass
SetWindowSubclass
DefSubclassProc
user32
DefWindowProcW
DispatchMessageW
SetCursor
TranslateMessage
TranslateAcceleratorW
DispatchMessageA
GetMessageA
ScreenToClient
CreateAcceleratorTableW
CreateIcon
GetSystemMenu
SetWindowLongW
FlashWindowEx
SendMessageW
DestroyAcceleratorTable
DestroyIcon
GetTouchInputInfo
ToUnicodeEx
GetKeyboardLayout
SetForegroundWindow
DestroyWindow
TrackMouseEvent
PostMessageW
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
MonitorFromPoint
EnumDisplayMonitors
IsProcessDPIAware
GetDC
ChangeDisplaySettingsExW
SystemParametersInfoA
GetAncestor
GetWindowLongPtrW
GetWindowPlacement
GetMessageW
CloseTouchInputHandle
IsWindowVisible
ClipCursor
SetWindowPlacement
GetClipCursor
ShowCursor
MapVirtualKeyW
SetWindowPos
InvalidateRgn
AdjustWindowRectEx
LoadCursorW
ClientToScreen
GetMenu
SetMenu
GetClientRect
GetWindowLongW
GetUpdateRect
PeekMessageW
GetWindowRect
PostQuitMessage
SendInput
ShowWindow
AppendMenuW
CreateMenu
CheckMenuItem
SetMenuItemInfoW
EnableMenuItem
GetRawInputData
VkKeyScanW
MapVirtualKeyExW
GetKeyState
GetAsyncKeyState
GetKeyboardState
SetCapture
SetWindowLongPtrW
MsgWaitForMultipleObjectsEx
RegisterRawInputDevices
RegisterClassExW
RegisterWindowMessageA
GetMonitorInfoW
EnumChildWindows
PostThreadMessageW
MonitorFromWindow
ValidateRect
GetCursorPos
MonitorFromRect
RedrawWindow
SetWindowDisplayAffinity
RegisterTouchWindow
GetSystemMetrics
IsWindow
CreateWindowExW
GetForegroundWindow
GetActiveWindow
SetCursorPos
ReleaseCapture
IsIconic
ole32
RevokeDragDrop
CreateStreamOnHGlobal
RegisterDragDrop
OleInitialize
CoUninitialize
CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
shell32
DragQueryFileW
DragFinish
SHGetKnownFolderPath
SHAppBarMessage
ShellExecuteW
gdi32
CreateRectRgn
GetDeviceCaps
DeleteObject
dwmapi
DwmEnableBlurBehindWindow
uxtheme
SetWindowTheme
advapi32
SystemFunction036
RegGetValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventUnregister
EventWriteTransfer
EventSetInformation
EventRegister
oleaut32
SysStringLen
GetErrorInfo
SetErrorInfo
SysFreeString
secur32
DecryptMessage
InitializeSecurityContextW
AcceptSecurityContext
FreeCredentialsHandle
ApplyControlToken
FreeContextBuffer
QueryContextAttributesW
DeleteSecurityContext
EncryptMessage
AcquireCredentialsHandleA
ws2_32
closesocket
getaddrinfo
getsockname
WSACleanup
freeaddrinfo
getpeername
WSASocketW
bind
connect
ioctlsocket
getsockopt
shutdown
recv
send
WSASend
setsockopt
WSAIoctl
WSAGetLastError
WSAStartup
crypt32
CertAddCertificateContextToStore
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFreeCertificateChain
CertDuplicateCertificateChain
CertDuplicateStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertVerifyCertificateChainPolicy
CertGetCertificateChain
ntdll
NtCreateFile
NtDeviceIoControlFile
RtlNtStatusToDosError
NtWriteFile
NtReadFile
NtCancelIoFileEx
bcrypt
BCryptGenRandom
api-ms-win-crt-math-l1-1-0
pow
trunc
floor
round
__setusermatherr
api-ms-win-crt-string-l1-1-0
strlen
wcslen
strcpy_s
wcsncmp
_wcsicmp
api-ms-win-crt-convert-l1-1-0
wcstol
_ultow_s
api-ms-win-crt-heap-l1-1-0
_callnewh
free
calloc
malloc
_set_new_mode
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-runtime-l1-1-0
exit
_initialize_narrow_environment
abort
_get_initial_narrow_environment
terminate
_crt_atexit
_register_onexit_function
_configure_narrow_argv
_initialize_onexit_table
_initterm_e
_initterm
_exit
__p___argc
_set_app_type
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_c_exit
_cexit
__p___argv
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 237KB - Virtual size: 236KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ