IMGUI_Recoil_Script[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
IMGUI_Recoil_Script.exe
Size 904KB
Sample240612-3n73payhjp
SHA256 c6874a0e7add4cc916b6dbe67326898f48ccd6cfc3f47eb15cd7545b409b7ef4
MD5 73ba1b093985d6b09ff3107b9f635630
SHA1 a8528462159913b96bbb1e870f0a738f363f2fb9
SHA512 9391130aff46a4fcfccb17d9bcfb220d4cab55958e66008d8d4691ce3aa3d13e963cfe8485a2400d915052da31233b84e02f1d547965a626f326a6c533624fd5
SSDEEP 24576:obWeUBlipNL7vRznMyW+nVq3R72tM6MLiFs7eHt3eh39c3CnULu:NfBcdelkuR7X39c3Cn
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
IMGUI_Recoil_Script.exe

File Explorer

IMGUI_Recoil_Script.exe

.exe 904KB

IMGUI_Recoil_Script.exe

IMPHASH 9a3c3f11aff0b97435f0372e2ac2ed88
SHA256 c6874a0e7add4cc916b6dbe67326898f48ccd6cfc3f47eb15cd7545b409b7ef4
MD5 73ba1b093985d6b09ff3107b9f635630
SHA1 a8528462159913b96bbb1e870f0a738f363f2fb9
SHA512 9391130aff46a4fcfccb17d9bcfb220d4cab55958e66008d8d4691ce3aa3d13e963cfe8485a2400d915052da31233b84e02f1d547965a626f326a6c533624fd5
SSDEEP 24576:obWeUBlipNL7vRznMyW+nVq3R72tM6MLiFs7eHt3eh39c3CnULu:NfBcdelkuR7X39c3Cn
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

689028

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\vm\Downloads\UniversalNoRecoil-main\bin\UniversalNoRecoil.pdb

kernel32

WideCharToMultiByte GlobalUnlock GetModuleHandleA LoadLibraryA QueryPerformanceFrequency GetProcAddress VerSetConditionMask FreeLibrary QueryPerformanceCounter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId GetStartupInfoW IsProcessorFeaturePresent GlobalFree GetCurrentProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext CreateEventW WaitForSingleObjectEx ResetEvent SetEvent DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection CloseHandle GlobalLock GlobalAlloc MultiByteToWideChar Sleep TerminateProcess GetModuleHandleW IsDebuggerPresent

user32

GetWindowLongW AdjustWindowRectEx GetDC MonitorFromWindow EnumDisplayMonitors ScreenToClient SetWindowTextW WindowFromPoint GetCapture GetMonitorInfoW ClientToScreen IsChild TrackMouseEvent GetForegroundWindow SetLayeredWindowAttributes SetFocus BringWindowToTop LoadCursorW SetCapture GetClipboardData ReleaseDC GetCursorPos SetCursor SetWindowLongW GetClientRect ReleaseCapture SetForegroundWindow IsIconic SetCursorPos OpenClipboard CloseClipboard EmptyClipboard DispatchMessageW SetClipboardData PeekMessageW TranslateMessage LoadIconW RegisterClassExW PostQuitMessage UpdateWindow DestroyWindow UnregisterClassW CreateWindowExW ShowWindow SetWindowPos GetKeyState DefWindowProcW GetAsyncKeyState mouse_event

gdi32

GetDeviceCaps

msvcp140

_Thrd_sleep _Cnd_do_broadcast_at_thread_exit ?_Throw_Cpp_error@std@@YAXH@Z _Query_perf_frequency _Thrd_yield _Thrd_id ??Bid@locale@std@@QEAA_KXZ ?always_noconv@codecvt_base@std@@QEBA_NXZ _Xtime_get_ticks _Thrd_join _Query_perf_counter ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?uncaught_exceptions@std@@YAHXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z ?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z ?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ ?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ

d3d11

D3D11CreateDeviceAndSwapChain

imm32

ImmAssociateContextEx ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3dcompiler_47

D3DCompile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memmove memcpy memcmp memchr memset _CxxThrowException __current_exception_context __current_exception __C_specific_handler strchr strstr __std_terminate __std_exception_copy __std_exception_destroy

api-ms-win-crt-stdio-l1-1-0

fputc _wfopen __stdio_common_vsscanf fseek __acrt_iob_func ftell fflush _get_stream_buffer_pointers __p__commode _fseeki64 fread fsetpos ungetc setvbuf fgetpos __stdio_common_vsprintf _set_fmode fwrite __stdio_common_vfprintf fgetc __stdio_common_vsprintf_s fclose

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode malloc free

api-ms-win-crt-convert-l1-1-0

atof strtol strtof

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

api-ms-win-crt-runtime-l1-1-0

_seh_filter_exe _get_narrow_winmain_command_line _initterm _initterm_e exit _exit _errno _c_exit _register_thread_local_exe_atexit_callback _cexit _invalid_parameter_noinfo_noreturn _beginthreadex _crt_atexit _register_onexit_function terminate _initialize_onexit_table _initialize_narrow_environment _set_app_type _configure_narrow_argv

api-ms-win-crt-string-l1-1-0

strncmp strncpy toupper strcmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

logf fmodf sqrtf pow sinf cosf floorf log ceilf atan2f acosf powf __setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale