C:\Users\Dell\Desktop\AnonymeAPI\AnonymeAPI\obj\Debug\AnonymeAPI.pdb
Static task
static1
General
-
Target
AnonymeTrialUi.rar
-
Size
175KB
-
MD5
68c2d323d1f5e7d0ae8b9e6ec80b92bf
-
SHA1
a2e99e4d14aa8eb4c9d9815ead40d339edd38712
-
SHA256
956e9c0262ec999222d773ef856b1ca6788f02d864101b940d310693478077c0
-
SHA512
92aa3eaa95ccfcf5b4bb63b63a888ac01c40180722d13530b98b75f6d2eda52c5939e127485263458f978e09c51a857d5a5f485d9b10e778e0db0fd6b91d75db
-
SSDEEP
3072:3w8sJCPsZNC58cCnpyw9PryazL74qvxnW39NhmslOQ8yirkL:3XP7enQEus3Y39vZlONML
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Lmaoo/AnonymeAPI.dll unpack001/Lmaoo/Solara/SolaraBootstrapper.exe unpack001/Lmaoo/qsdqsdqsdqsdqdqdqdq.exe
Files
-
AnonymeTrialUi.rar.rar
-
Lmaoo/AnonymeAPI.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Lmaoo/AnonymeAPI.pdb
-
Lmaoo/Solara/SolaraBootstrapper.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\Ashtin\Desktop\WTF\SolaraBootstrapper\SolaraBootstrapper\obj\Debug\SolaraBootstrapper.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Lmaoo/Solara/autoexec/newinjector.txt
-
Lmaoo/Solara/scripts/qsdfsdfsdfsdfsdfsdfdsfsdf.txt
-
Lmaoo/Solara/workspace/.tests/appendfile.txt
-
Lmaoo/Solara/workspace/.tests/getcustomasset.txt
-
Lmaoo/Solara/workspace/.tests/isfile.txt
-
Lmaoo/Solara/workspace/.tests/listfiles/test_1.txt
-
Lmaoo/Solara/workspace/.tests/listfiles/test_2.txt
-
Lmaoo/Solara/workspace/.tests/loadfile.txt
-
Lmaoo/Solara/workspace/.tests/readfile.txt
-
Lmaoo/Solara/workspace/.tests/writefile
-
Lmaoo/Solara/workspace/.tests/writefile.txt
-
Lmaoo/Solara/workspace/IY_FE.iy
-
Lmaoo/Solara/workspace/SimpleSpy/Settings.json
-
Lmaoo/Solara/workspace/dex/deps_version.dat
-
Lmaoo/Solara/workspace/dex/rbx_api.dat
-
Lmaoo/qsdqsdqsdqsdqdqdqdq.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\Dell\Desktop\qsdqsdqsdqsdqdqdqdq\qsdqsdqsdqsdqdqdqdq\obj\Debug\qsdqsdqsdqsdqdqdqdq.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Lmaoo/qsdqsdqsdqsdqdqdqdq.exe.config
-
Lmaoo/qsdqsdqsdqsdqdqdqdq.pdb