risepro | 2024-06-08_f0aaee3fb087e3234db405398448f0f4_magniber

Sharing

Copy URL Twitter E-mail

General

Target

2024-06-08_f0aaee3fb087e3234db405398448f0f4_magniber
Size

4.6MB
MD5

f0aaee3fb087e3234db405398448f0f4
SHA1

c0f10adf9a6e5aa898755d976e9672c67b8c967c
SHA256

5253978b57e785d3ded7d2dcd0976db851295fcc4cfb2cbd8657addd19a18ad4
SHA512

e19e8cc87855c24fc8b36280ae5925be84fb3407fb1efc792486705e8d1c96c94da86d2a8928350d1b2f749e1f24a07156c5499ed3a7daa54cfa1baf59579710
SSDEEP

98304:48GXkWHJqMiCEeGbWNZoYAA1dxztFAWV9:48G5pqMiCHoYA0V

Score

10^/10

risepro

Malware Config

Signatures

Risepro family
risepro

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-08_f0aaee3fb087e3234db405398448f0f4_magniber

Files

2024-06-08_f0aaee3fb087e3234db405398448f0f4_magniber
.exe windows:6 windows x86 arch:x86

553c24b35090144c58874b7658698293

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\SkullGirls.pdb

Imports

ws2_32

htonl
htons
WSACleanup
ntohs
ntohl
WSAStartup

winmm

timeEndPeriod
PlaySoundW
timeBeginPeriod
timeGetTime

dbghelp

MiniDumpWriteDump

d3d9

Direct3DCreate9

dinput8

DirectInput8Create

xinput9_1_0

XInputGetState

d3dx9_43

D3DXCreateFontW
D3DXCreateTextureFromFileInMemoryEx
D3DXCompileShader

tolk

Tolk_Output
Tolk_HasBraille
Tolk_HasSpeech
Tolk_Unload
Tolk_Load

steam_api

SteamAPI_UnregisterCallback
SteamAPI_RegisterCallback
SteamInternal_ContextInit
SteamInternal_FindOrCreateUserInterface
SteamAPI_GetHSteamUser
SteamAPI_Init
SteamAPI_UnregisterCallResult
SteamAPI_RunCallbacks
SteamAPI_RegisterCallResult
SteamAPI_RestartAppIfNecessary
SteamAPI_Shutdown
SteamInternal_CreateInterface

kernel32

SetStdHandle
IsValidCodePage
GetACP
GetTimeZoneInformation
DeleteFileW
HeapReAlloc
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
GetFileType
FreeLibraryAndExitThread
ExitThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
FindClose
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
InterlockedPushEntrySList
RtlUnwind
RaiseException
OutputDebugStringW
CreateDirectoryW
GetFileAttributesExW
MoveFileExW
CopyFileW
CloseHandle
CreateThread
EnterCriticalSection
ReleaseSemaphore
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
DeleteCriticalSection
CreateSemaphoreW
OutputDebugStringA
GetModuleFileNameA
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
FormatMessageA
Sleep
LoadLibraryExW
LocalFree
ReadFile
GetFileSizeEx
GetStdHandle
WriteFile
GetModuleHandleExW
TerminateProcess
GetModuleFileNameW
WaitForMultipleObjects
InitializeCriticalSectionAndSpinCount
CreatePipe
CreateFileW
FreeEnvironmentStringsW
ResumeThread
GetOEMCP
CreateEventW
GetExitCodeThread
SetEvent
SetFilePointerEx
CreateProcessW
GetModuleHandleW
WideCharToMultiByte
GetEnvironmentStringsW
FlushFileBuffers
GetExitCodeProcess
GetCurrentProcess
GetCurrentThreadId
CreateSemaphoreExA
WaitForSingleObjectEx
LoadLibraryW
GetLocalTime
ExitProcess
GetCurrentProcessId
SetThreadExecutionState
IsDebuggerPresent
CheckRemoteDebuggerPresent
SetUnhandledExceptionFilter
CreateDirectoryA
InitializeCriticalSectionEx
DecodePointer
VirtualFree
VirtualAlloc
SleepConditionVariableCS
WakeAllConditionVariable
InitializeConditionVariable
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalAlloc
GlobalLock
GlobalUnlock
GetUserDefaultLCID
DebugBreak
SetEndOfFile
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
SleepConditionVariableSRW
GetSystemTimeAsFileTime
GetTempPathW
LCMapStringEx
MultiByteToWideChar
EncodePointer
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
HeapSize
GetCommandLineA
GetCommandLineW
GetProcessHeap
SetEnvironmentVariableW
DuplicateHandle
WriteConsoleW

user32

MessageBoxA
OpenClipboard
CloseClipboard
EmptyClipboard
SetClipboardData
EnumDisplaySettingsExW
AdjustWindowRect
GetCursorPos
IsIconic
LoadImageW
EnumDisplayDevicesW
SetWindowLongW
GetClientRect
LoadCursorW
SetCursor
DefWindowProcW
DestroyWindow
SetWindowPos
CreateWindowExW
ScreenToClient
CallNextHookEx
GetSystemMetrics
UnregisterClassW
RegisterClassExW
ShowWindow
RegisterDeviceNotificationW
ChangeDisplaySettingsW
DispatchMessageW
PeekMessageW
TrackMouseEvent
UnhookWindowsHookEx
TranslateMessage
SetCapture
SetWindowsHookExW
PostQuitMessage
EnumDisplaySettingsW
SystemParametersInfoW
UnregisterDeviceNotification
UpdateWindow
ReleaseCapture

shell32

SHGetFolderPathA
SHGetFolderPathW

ole32

CoCreateInstance
CoInitializeEx
CoInitialize
CoSetProxyBlanket
CoUninitialize

oleaut32

SysAllocString
SysFreeString

advapi32

CryptAcquireContextA
CryptReleaseContext
CryptGenRandom

iphlpapi

GetIfEntry2
GetIfTable2Ex
FreeMibTable

Exports

Exports

ggpo_add_local_input
ggpo_add_player
ggpo_advance_frame
ggpo_close_session
ggpo_disconnect_player
ggpo_disconnect_spectator
ggpo_get_current_frame
ggpo_get_is_rollback
ggpo_get_last_confirmed_frame
ggpo_get_network_stats
ggpo_idle
ggpo_set_disconnect_notify_start
ggpo_set_disconnect_timeout
ggpo_set_frame_delay
ggpo_set_ggpo_logging
ggpo_start_session
ggpo_start_spectating
ggpo_start_synctest
ggpo_synchronize_input

Sections

.text
Size: 3.2MB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 103KB - Virtual size: 4.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 234KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

553c24b35090144c58874b7658698293

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

winmm

dbghelp

d3d9

dinput8

xinput9_1_0

d3dx9_43

tolk

steam_api

kernel32

user32

shell32

ole32

oleaut32

advapi32

iphlpapi

Exports

Exports

Sections

.text Size: 3.2MB - Virtual size: 3.2MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 103KB - Virtual size: 4.2MB

.rsrc Size: 71KB - Virtual size: 71KB

.reloc Size: 234KB - Virtual size: 233KB

.text
Size: 3.2MB - Virtual size: 3.2MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 103KB - Virtual size: 4.2MB

.rsrc
Size: 71KB - Virtual size: 71KB

.reloc
Size: 234KB - Virtual size: 233KB