Ender-Obfuscated[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Ender-Obfuscated.zip
Size

5.2MB
MD5

9211db88d0f24bd6e0f18ef2de28123c
SHA1

abac7f7e846cf249b79491e4f2df8aeec46a8b54
SHA256

982f990c74b6557d28bfa153036cccd60d86052a6f2e234636110d6d44371fcf
SHA512

b82503f9949679d17112568cbdf6c081fb35639d7a80424bc1141fd056419597dab2ed316a2c646099747fd189997be3ac41701c03d247cc024e728754be4f34
SSDEEP

98304:WCkcKRTDSXn4IaRmT6942TzBL46i0cyPGoDFz4HFWGZzn9fOeauJ/NxsntAAZ:WCkcSDSX4FRmm9TNL9teIec4ntQuJXOh

Score

3^/10

Malware Config

Signatures

Unsigned PE 5 IoCs

Checks for missing Authenticode signature.

resource
unpack001/EnderV3/Ender.dll
unpack001/EnderV3/Ender.exe
unpack001/EnderV3/EnderAPI.dll
unpack001/EnderV3/FluxAPI.dll
unpack001/EnderV3/WeAreDevs_API.dll

Files

Ender-Obfuscated.zip
.zip
EnderV3/Ender.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Nyron\source\repos\FluxAPI-master\FluxAPI-master\FluxAPI\obj\x86\Debug\FluxAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EnderV3/Ender.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EnderV3/Ender1.exe.config
EnderV3/Ender1.pdb
EnderV3/EnderAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Nyron\source\repos\FluxAPI-master\FluxAPI-master\FluxAPI\obj\x86\Debug\FluxAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EnderV3/FluxAPI.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Nyron\source\repos\FluxAPI-master\FluxAPI-master\FluxAPI\obj\x86\Debug\FluxAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
EnderV3/Monaco/Monaco.html
.js
EnderV3/Monaco/base.txt
EnderV3/Monaco/classfunc.txt
EnderV3/Monaco/globalf.txt
EnderV3/Monaco/globalns.txt
EnderV3/Monaco/globalv.txt
EnderV3/Monaco/vs/base/worker/workerMain.js
.js
EnderV3/Monaco/vs/basic-languages/bat/bat.js
EnderV3/Monaco/vs/basic-languages/coffee/coffee.js
EnderV3/Monaco/vs/basic-languages/cpp/cpp.js
EnderV3/Monaco/vs/basic-languages/csharp/csharp.js
EnderV3/Monaco/vs/basic-languages/csp/csp.js
EnderV3/Monaco/vs/basic-languages/css/css.js
EnderV3/Monaco/vs/basic-languages/dockerfile/dockerfile.js
EnderV3/Monaco/vs/basic-languages/fsharp/fsharp.js
EnderV3/Monaco/vs/basic-languages/go/go.js
EnderV3/Monaco/vs/basic-languages/handlebars/handlebars.js
.js
EnderV3/Monaco/vs/basic-languages/html/html.js
.js
EnderV3/Monaco/vs/basic-languages/ini/ini.js
EnderV3/Monaco/vs/basic-languages/java/java.js
EnderV3/Monaco/vs/basic-languages/less/less.js
EnderV3/Monaco/vs/basic-languages/lua/lua.js
EnderV3/Monaco/vs/basic-languages/markdown/markdown.js
.js
EnderV3/Monaco/vs/basic-languages/msdax/msdax.js
EnderV3/Monaco/vs/basic-languages/mysql/mysql.js
EnderV3/Monaco/vs/basic-languages/objective-c/objective-c.js
EnderV3/Monaco/vs/basic-languages/pgsql/pgsql.js
EnderV3/Monaco/vs/basic-languages/php/php.js
EnderV3/Monaco/vs/basic-languages/postiats/postiats.js
EnderV3/Monaco/vs/basic-languages/powershell/powershell.js
EnderV3/Monaco/vs/basic-languages/pug/pug.js
EnderV3/Monaco/vs/basic-languages/python/python.js
EnderV3/Monaco/vs/basic-languages/r/r.js
EnderV3/Monaco/vs/basic-languages/razor/razor.js
.js
EnderV3/Monaco/vs/basic-languages/redis/redis.js
EnderV3/Monaco/vs/basic-languages/redshift/redshift.js
EnderV3/Monaco/vs/basic-languages/ruby/ruby.js
EnderV3/Monaco/vs/basic-languages/rust/rust.js
EnderV3/Monaco/vs/basic-languages/sb/sb.js
EnderV3/Monaco/vs/basic-languages/scss/scss.js
EnderV3/Monaco/vs/basic-languages/solidity/solidity.js
EnderV3/Monaco/vs/basic-languages/sql/sql.js
EnderV3/Monaco/vs/basic-languages/st/st.js
EnderV3/Monaco/vs/basic-languages/swift/swift.js
EnderV3/Monaco/vs/basic-languages/vb/vb.js
EnderV3/Monaco/vs/basic-languages/xml/xml.js
EnderV3/Monaco/vs/basic-languages/yaml/yaml.js
EnderV3/Monaco/vs/editor/contrib/suggest/media/String_16x.svg
EnderV3/Monaco/vs/editor/contrib/suggest/media/String_inverse_16x.svg
EnderV3/Monaco/vs/editor/editor.main.css
EnderV3/Monaco/vs/editor/editor.main.js
.js
EnderV3/Monaco/vs/editor/editor.main.nls.de.js
EnderV3/Monaco/vs/editor/editor.main.nls.es.js
EnderV3/Monaco/vs/editor/editor.main.nls.fr.js
EnderV3/Monaco/vs/editor/editor.main.nls.it.js
EnderV3/Monaco/vs/editor/editor.main.nls.ja.js
EnderV3/Monaco/vs/editor/editor.main.nls.js
EnderV3/Monaco/vs/editor/editor.main.nls.ko.js
EnderV3/Monaco/vs/editor/editor.main.nls.ru.js
EnderV3/Monaco/vs/editor/editor.main.nls.zh-cn.js
EnderV3/Monaco/vs/editor/editor.main.nls.zh-tw.js
EnderV3/Monaco/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
EnderV3/Monaco/vs/language/css/cssMode.js
.js
EnderV3/Monaco/vs/language/css/cssWorker.js
.js
EnderV3/Monaco/vs/language/html/htmlMode.js
.js
EnderV3/Monaco/vs/language/html/htmlWorker.js
.js
EnderV3/Monaco/vs/language/json/jsonMode.js
.js
EnderV3/Monaco/vs/language/json/jsonWorker.js
.js
EnderV3/Monaco/vs/language/typescript/lib/typescriptServices.js
.js
EnderV3/Monaco/vs/language/typescript/tsMode.js
.js
EnderV3/Monaco/vs/language/typescript/tsWorker.js
.js
EnderV3/Monaco/vs/loader.js
.js
EnderV3/READ ME.txt
EnderV3/Scripts/Aimbot 3.0.txt
.js
EnderV3/Scripts/Aimbot.txt
.js
EnderV3/Scripts/Alt+Print.txt
EnderV3/Scripts/BloxHunt.txt
EnderV3/Scripts/CBROKillAll.txt
EnderV3/Scripts/CC Aimbot V2.txt
EnderV3/Scripts/CC Aimbot.txt
.js
EnderV3/Scripts/CTRL+Del.txt
EnderV3/Scripts/Click TP Tool.txt
EnderV3/Scripts/CocoHub.txt
EnderV3/Scripts/Dark Hub.txt
EnderV3/Scripts/DexV1.txt
EnderV3/Scripts/DexV4.txt
EnderV3/Scripts/DivineSisters.txt
EnderV3/Scripts/EclipseMM2.txt
EnderV3/Scripts/FPSBoost.txt
EnderV3/Scripts/Flee The Facility.txt
EnderV3/Scripts/Infinite Yield.txt
EnderV3/Scripts/Invisible Fling.txt
EnderV3/Scripts/Jailbreak.txt
EnderV3/Scripts/Kraken Hub.txt
EnderV3/Scripts/LucidityMM2.txt
EnderV3/Scripts/MM2.txt
EnderV3/Scripts/MM2Autofarm.txt
EnderV3/Scripts/MheeHub.txt
EnderV3/Scripts/NoClipKeybind.txt
EnderV3/Scripts/OxieHub.txt
EnderV3/Scripts/Prisonware.txt
EnderV3/Scripts/Reviz Admin.txt
EnderV3/Scripts/SharkBite.txt
EnderV3/Scripts/ZyrexHub.txt
EnderV3/Scripts/oofNotoriety.txt
EnderV3/Scripts/script.txt
EnderV3/WeAreDevs_API.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Nyron\source\repos\FluxAPI-master\FluxAPI-master\FluxAPI\obj\x86\Debug\FluxAPI.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 40KB - Virtual size: 40KB

.rsrc Size: 1024B - Virtual size: 972B

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rsrc Size: 216KB - Virtual size: 215KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 40KB - Virtual size: 40KB

.rsrc Size: 1024B - Virtual size: 972B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 40KB - Virtual size: 40KB

.rsrc Size: 1024B - Virtual size: 972B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 40KB - Virtual size: 40KB

.rsrc Size: 1024B - Virtual size: 972B

.reloc Size: 512B - Virtual size: 12B

.text
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 1024B - Virtual size: 972B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3.5MB - Virtual size: 3.5MB

.rsrc
Size: 216KB - Virtual size: 215KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 1024B - Virtual size: 972B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 1024B - Virtual size: 972B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 40KB - Virtual size: 40KB

.rsrc
Size: 1024B - Virtual size: 972B

.reloc
Size: 512B - Virtual size: 12B