a58d950c06638ca855689093109a9da2_JaffaCakes118
- SHA256 ba2a7de7fea0550a1ed3a5c419c5e878bdfe49286b190ac156b61dab0012087a
Overview
overview
3Static
static
3Rpoxo BETA...ox.dll
windows7-x64
1Rpoxo BETA...ox.dll
windows10-2004-x64
1Rpoxo BETA...UI.dll
windows7-x64
1Rpoxo BETA...UI.dll
windows10-2004-x64
1Rpoxo BETA...xo.exe
windows7-x64
1Rpoxo BETA...xo.exe
windows10-2004-x64
1Rpoxo BETA...ng.dll
windows7-x64
1Rpoxo BETA...ng.dll
windows10-2004-x64
1Rpoxo BETA...ms.dll
windows7-x64
1Rpoxo BETA...ms.dll
windows10-2004-x64
1Rpoxo BETA...em.dll
windows7-x64
1Rpoxo BETA...em.dll
windows10-2004-x64
1Rpoxo BETA...PI.dll
windows7-x64
1Rpoxo BETA...PI.dll
windows10-2004-x64
1Rpoxo BETA...in.dll
windows7-x64
3Rpoxo BETA...in.dll
windows10-2004-x64
3Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/FastColoredTextBox.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/FastColoredTextBox.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/FlatUI.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/FlatUI.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/Proxo.exe
Resource
win7-20231129-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/Proxo.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.Drawing.dll
Resource
win7-20240220-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.Drawing.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.Windows.Forms.dll
Resource
win7-20240611-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.Windows.Forms.dll
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.dll
Resource
win7-20240221-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral13
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/WeAreDevs_API.dll
Resource
win7-20240508-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral14
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/WeAreDevs_API.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral15
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/exploit-main.dll
Resource
win7-20240220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral16
Sample
Rpoxo BETA V-1.7/Proxo BETA V1.7/exploit-main.dll
Resource
win10v2004-20240611-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target a58d950c06638ca855689093109a9da2_JaffaCakes118
- Size 7.8MB
- Sample240613-pqt2ysyeph
- SHA256 ba2a7de7fea0550a1ed3a5c419c5e878bdfe49286b190ac156b61dab0012087a
- MD5 a58d950c06638ca855689093109a9da2
- SHA1 261c44cf6df72dbbdbecea8afbf40e8db89b3688
- SHA512 a382df0ff1b9e8dcef7bb779392b23987a063015c8876548a9d63bc03599f5f0a50428591a6da14df4443c6715f62188e41317be74d79bb974cccfd5581521f6
- SSDEEP 196608:5XnPAjPKpY9AbZYq4ipzV62P6bBKuXmzlLMI34iwJVLrO/:eKpYGFYBazKHmSI3ubC/
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 8 IoCs
Checks for missing Authenticode signature.
resource unpack001/Rpoxo BETA V-1.7/Proxo BETA V1.7/FastColoredTextBox.dll unpack001/Rpoxo BETA V-1.7/Proxo BETA V1.7/FlatUI.dll unpack001/Rpoxo BETA V-1.7/Proxo BETA V1.7/Proxo.exe unpack001/Rpoxo BETA V-1.7/Proxo BETA V1.7/System.Drawing.dll unpack001/Rpoxo BETA V-1.7/Proxo BETA V1.7/System.Windows.Forms.dll unpack001/Rpoxo BETA V-1.7/Proxo BETA V1.7/System.dll unpack001/Rpoxo BETA V-1.7/Proxo BETA V1.7/WeAreDevs_API.dll unpack001/Rpoxo BETA V-1.7/Proxo BETA V1.7/exploit-main.dll
File Explorer
-
a58d950c06638ca855689093109a9da2_JaffaCakes118.rar 7.8MB
-
Rpoxo BETA V-1.7/Proxo BETA V1.7/FastColoredTextBox.dll.dll 323KB
-
Rpoxo BETA V-1.7/Proxo BETA V1.7/FlatUI.dll.dll 56KB
-
Rpoxo BETA V-1.7/Proxo BETA V1.7/Proxo.exe.exe 6.7MB
-
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.Drawing.dll.dll 586KB
-
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.Windows.Forms.dll.dll 5.0MB
-
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.dll.dll 3.4MB
-
Rpoxo BETA V-1.7/Proxo BETA V1.7/WeAreDevs_API.dll.dll 12KB
-
Rpoxo BETA V-1.7/Proxo BETA V1.7/exploit-main.dll.dll 546KB
-
Rpoxo BETA V-1.7/READ ME.txt389B
Rpoxo BETA V-1.7/Proxo BETA V1.7/FastColoredTextBox.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 f67f8caf9216123c0f669ae7a0e9a086a28ad9fee7e4756c224a7706ceaab1cd
- MD5 71963eb6707ef2de595d336d5810082b
- SHA1 aefa3ec8411e2ad2a7f0a496be0c7f52cb908bd5
- SHA512 a2410423d7d9c730e3d7d48a03a01342149778539bc2bb32fa404d1722296eb1f0ebfc2f8224665b6e84b6e17a16cc3392334ad7958662fe9d65c6bada6a471b
- SSDEEP 6144:JR0J4lxA/7BA4xvNIwcKAZ+IBJhaeFMdFDCBdxBsqmLDi5eN5DDl1SqPF:JR0J4ElAovNIwxAZdBOeFMuzheN5
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
336106
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\LLAMA\source\repos\VeilUI\FastColoredTextBox\obj\Debug\FastColoredTextBox.pdb
mscoree
_CorDllMain
Name
.text
Size
320KB
Virtual Size
320KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Rpoxo BETA V-1.7/Proxo BETA V1.7/FlatUI.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 ee5aa955cc297fd7adbe641ee3a913d08fc0013c239b9710c9c87e10002db089
- MD5 797261f587bb9c6b223b81d31d3b1507
- SHA1 4c030666f808841a9c5e8bba14ef4b2874826af2
- SHA512 1dae643d1c6f71aedfabad43ea687bde8288a510342315c86887b6c18337fe8b5ec61f686ae511e30a8fca7aa9347b3f6ff5f9b6c9f4017dff3aec000858d358
- SSDEEP 1536:qIMXFjCv9IDuPx5ADHH7oPB2v1uv3yGzSlFIM6:qIMXFjQ9IDsPALbo+y3yGzSlFj6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
63054
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Aero\Desktop\FlatUI-master\src\FlatUI\obj\Debug\FlatUI.pdb
mscoree
_CorDllMain
Name
.text
Size
54KB
Virtual Size
53KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
872B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Rpoxo BETA V-1.7/Proxo BETA V1.7/Proxo.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 70f08f2f619ac7bc2c5ab13f90dde5d91689a67b778641785ea8c7b69837843e
- MD5 d926b731c52d5c345e3ce752aedcada3
- SHA1 1372f6012cea61bffb2d13d72ed6600c01e90622
- SHA512 050ca5a55550e2b0dc2ff96cf4e4cdf3ee71c256a7f04190a5cb7d7b7d5d6a9f9b4f437b756e40da7b9513c977217b6d09cd25b7dc0f27c2a13fefc5a16c1f0e
- SSDEEP 98304:lp9jNdkjCaQpT+m+TwtKA6k80OfKs6VLdyAjKj0JAG40klE32acHxgtIB:vdkjCaQ8A6hlCs2dyGSGtYNtHWt6
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
7079254
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\dthom\Desktop\Proxo\obj\Debug\Emperor.pdb
mscoree
_CorExeMain
Name
.text
Size
6.7MB
Virtual Size
6.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.Drawing.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 405a1529a2fdb2a63fc3e85769ed384a745e06598eb653f7d9ee43e7d355b9f1
- MD5 510e18d64827f314e96ad00cd7ba3de9
- SHA1 dfce03403072475291a61e7930b0a2a110d4738a
- SHA512 0b9d09eece2338a9eadeb5903fdf4f65b97e494b287631026bf6da1b3c7c20d43772981de2328d014f650fadb0d76d38444a30ba336756d2b15172653b7de53a
- SSDEEP 6144:vcDW1iUg2l/k2x4SmLXa0T272EBxhbBFqfOoqDBJsCYCMVgKPafdPX8cHsl6WvOo:piUl/kjSmLXaRBv8pgCalvo6Wsqd
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
568570
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Drawing.pdb
mscoree
_CorDllMain
Name
.text
Size
547KB
Virtual Size
547KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
14KB
Virtual Size
13KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.Windows.Forms.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 fbf60e0036ae650af5e2f8a008e912e01ccddc8f1923e4df35a45a8b2122adb2
- MD5 1cae927a20e8c66567bdbb4ef450c16b
- SHA1 291f65b23d4808cbd087c1e16e1272aa6c262764
- SHA512 b010f8b9bb9058f8562cabcd114a6481e1ad96873d1945f55eed06d12443c81b88e6eb8152eb1a6bfe1fe44c84263f3e6b0cae886b657d6bdff28016862ab8f4
- SSDEEP 49152:bSjcIxwuIq8iDfuMKhoi8BfGWMdYe90mZ4dKXIwAv4/vw+H2EuiQ3llPufHVa:baIZizgii8BfyB05lPufM
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5133034
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.Windows.Forms.pdb
mscoree
_CorDllMain
Name
.text
Size
4.9MB
Virtual Size
4.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
83KB
Virtual Size
83KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Rpoxo BETA V-1.7/Proxo BETA V1.7/System.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8cab5074726cda91b28ce5bc07b53a9610cfb514679867c2e5848d8d7473e191
- MD5 04cf5f76661a4e41ee3b276a87c1f70c
- SHA1 08deeae10b8032f53ffbc0a6e161d8b35e751ac4
- SHA512 1bf1f88963160cdecc164619ad374c98c1ef0c8ee9ee89009d4b1f3be6c36e50ff4a6cb9d76ff19f6a915c6619dec22ba40411392ed400682bdb29c080bc41ac
- SSDEEP 49152:r0Zk0sLqgVG1W98r00yECDixBvRr//GDs/tHyw5:rVlGXe8rzVG4Vy+
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
3294734
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
System.pdb
mscoree
_CorDllMain
Name
.text
Size
3.1MB
Virtual Size
3.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
232KB
Virtual Size
232KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Rpoxo BETA V-1.7/Proxo BETA V1.7/WeAreDevs_API.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 9ad9b337fbec7d9f2a0592c3d2384f09e64cfb033eb602ad1fd732e72c20338e
- MD5 286b3f23f10c9d11101132e6e80515e9
- SHA1 978f52eebca7d2b81ac8d12667ed1321b37845b4
- SHA512 af3e6d9854d46e99249a76bfb59a7fb6fbd65b42ac396e96ffa5917a9deb2f6a5ac96a06fc16ace9ea587fe6451b70c035bc7f907bbf1633c6fd4fe3e0cbfd27
- SSDEEP 192:/eZk3CieyT0L8To3dJDqOVo3CvrBdUBsTsex02NfaTfA06s94G:gZyT0Lmo3LdVo3CDBdUex02NyTYw
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
18474
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
F:\OneDrive\Digital Developing\Visual Studio\ROBLOX\Current\Exploit API v2\WeAreDevs_API\obj\Release\WeAreDevs_API.pdb
mscoree
_CorDllMain
Name
.text
Size
10KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Rpoxo BETA V-1.7/Proxo BETA V1.7/exploit-main.dll
- IMPHASH c86c37900324f284fd04e1ffc85fbb97
- SHA256 eca3bdc638b9fd9304b401e3a4ef6b40c12c193fa3633d3d8bfc65a1d7d950e4
- MD5 9f04155387e7a850561e206c48c54cfd
- SHA1 d3788149c90f4489f02026451d8c8f807dbb6f4e
- SHA512 4ce998ff1b7ac7bc9c249a29f04ad9074dfa81614ceb9d8e884cca45daf83cdb71f58f79d85e085b2ee6467556872a4370d9dafd9775909826d8d53d138e5b54
- SSDEEP 12288:oTvHofRsMJ0qKNNlnJV5bYfD2y/tPe6ZLoQr42KQSO31i/Du6lRsEXot:V0/Nld0r1ZLog40usE8
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
232374
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
E:\GitHub\Exploit-API\src\Release\exploit-main.pdb
kernel32
GetProcAddress
FreeLibrary
FormatMessageA
ReadFile
VirtualProtect
CreateNamedPipeA
SetConsoleTextAttribute
VirtualFree
SetConsoleTitleA
GetStdHandle
VirtualAlloc
GetCurrentDirectoryA
ExitThread
GetModuleHandleA
DisconnectNamedPipe
MultiByteToWideChar
Sleep
DisableThreadLibraryCalls
GlobalAlloc
FreeConsole
CreateThread
AddVectoredExceptionHandler
GlobalLock
GetConsoleWindow
GlobalUnlock
AllocConsole
ConnectNamedPipe
InterlockedExchange
InterlockedCompareExchange
FlushInstructionCache
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
OpenThread
GetThreadContext
SetThreadContext
SuspendThread
LoadLibraryA
CloseHandle
GetModuleHandleW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
VirtualQuery
WriteConsoleW
SetEndOfFile
HeapSize
SetStdHandle
CreateFileW
SetFilePointerEx
GetFileSizeEx
GetConsoleCP
WriteFile
FlushFileBuffers
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileAttributesExW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
GetTimeZoneInformation
ReadConsoleW
GetConsoleMode
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetLastError
ResumeThread
GetModuleFileNameA
GetDateFormatW
QueryPerformanceFrequency
GetModuleHandleExW
ExitProcess
LoadLibraryExW
GetModuleFileNameW
InterlockedFlushSList
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
WideCharToMultiByte
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RtlUnwind
user32
GetCursorPos
SendInput
EmptyClipboard
SetWindowPos
MessageBoxW
GetSystemMetrics
CreatePopupMenu
ShowWindow
GetAsyncKeyState
OpenClipboard
SetWindowLongA
CloseClipboard
CallWindowProcA
AppendMenuA
GetWindowLongA
MessageBoxA
SetMenu
DefWindowProcA
GetClipboardData
FindWindowW
SendMessageA
DrawMenuBar
SetClipboardData
CreateMenu
gdi32
SetTextColor
GetStockObject
shell32
ShellExecuteA
wininet
InternetOpenA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
Name
.text
Size
404KB
Virtual Size
404KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
21KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=52, id=259, version=26213,
count=197, id=261, version=26213,
count=31, id=260, version=26213,
count=61, id=261, version=27521,
count=34, id=260, version=27521,
count=25, id=259, version=27521,
count=11, id=257, version=26213,
count=170, id=1, productName=Unmarked objects,
count=4, id=260, version=24629,
count=30, id=264, version=27702,
count=1, id=255, productName=VS2019 v16.1.2 build 27702, version=27702,
count=1, id=258, productName=VS2019 v16.1.2 build 27702, version=27702,
Rpoxo BETA V-1.7/READ ME.txt
- SHA256 46ef8fbe235b6b57cb2666d8cfd700fbb8b590e0a5921f1d6c22edd37d4079fa
- MD5 d86ef8b61f5dd9556fb2d5547e58d25e
- SHA1 8032fd5f3c9ab3b817e3fea84c222108e0cebc24
- SHA512 0a72f064cf44c092268bdb20969c3f1b2aea02e87e5d5f3a21ee52f438dfb6d9c70868176d5a185bd269c10d6a0519252aafd6311299d9eb08bc9629d1a10183
- MD5 SHA1 SHA512