E:\Mes Documents\VS Projects\MaterialSkin\_release\MaterialSkin-2.3.1\MaterialSkin\obj\Release\net461\win\MaterialSkin.pdb
Overview
overview
8Static
static
3MetaBuilder.zip
windows10-2004-x64
1MetaBuilde...in.dll
windows10-2004-x64
1MetaBuilde...er.exe
windows10-2004-x64
8MetaBuilde...xe.xml
windows10-2004-x64
1MetaBuilde...er.pdb
windows10-2004-x64
3MetaBuilder/dnlib.dll
windows10-2004-x64
1MetaBuilder/dnlib.xml
windows10-2004-x64
1MetaBuilde...st.exe
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
MetaBuilder.zip
Resource
win10v2004-20240611-en
Behavioral task
behavioral2
Sample
MetaBuilder/MaterialSkin.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
MetaBuilder/MetaBuilder.exe
Resource
win10v2004-20240611-en
Behavioral task
behavioral4
Sample
MetaBuilder/MetaBuilder.exe.xml
Resource
win10v2004-20240611-en
Behavioral task
behavioral5
Sample
MetaBuilder/MetaBuilder.pdb
Resource
win10v2004-20240508-en
Behavioral task
behavioral6
Sample
MetaBuilder/dnlib.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral7
Sample
MetaBuilder/dnlib.xml
Resource
win10v2004-20240611-en
Behavioral task
behavioral8
Sample
MetaBuilder/localhost.exe
Resource
win10v2004-20240508-en
General
-
Target
MetaBuilder.zip
-
Size
3.9MB
-
MD5
4957be44996cf5022997c4c25970ae3f
-
SHA1
f2394930678fa0d843826a02eb9e5f1019560ced
-
SHA256
eed0c4edab3e751e754de654b8eff38c1d36b9e54d7354e20639503f312bae40
-
SHA512
dd764d121f02cde0f1adc7bc51c0f734e3bd7adb02a8d9a6a8d0e5d0fa8af0d0b956908fc91c778beade5ed22581efec2f99c23a6673f334aa2fffa263e566a0
-
SSDEEP
98304:asiS8VrfzicG6tLSgATSl3NWMOAm3BM+Q:ajNHi6YJGl4Mm3+b
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/MetaBuilder/MaterialSkin.dll unpack001/MetaBuilder/MetaBuilder.exe unpack001/MetaBuilder/dnlib.dll unpack001/MetaBuilder/localhost.exe
Files
-
MetaBuilder.zip.zip
-
MetaBuilder/MaterialSkin.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 6.4MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MetaBuilder/MetaBuilder.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\LAB_MTX-R\Desktop\New folder (3)\MetaLoader - SourceCode\Builder\Builder\bin\Debug\MetaBuilder.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 345KB - Virtual size: 345KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MetaBuilder/MetaBuilder.exe.config.xml
-
MetaBuilder/MetaBuilder.pdb
-
MetaBuilder/dnlib.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
/_/src/obj/Release/net45/dnlib.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MetaBuilder/dnlib.xml.xml
-
MetaBuilder/localhost.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\LAB_MTX-R\Desktop\New folder (3)\MetaLoader - SourceCode\Stub\Stub\obj\Debug\localhost.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ