C:\Users\Ilham\Documents\Visual Studio 2019\Projects\Siticone.UI\Build\Release\Siticone.UI.WinForms\Siticone.UI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Astral Client.7z
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Astral Client.7z
Resource
win10v2004-20240611-en
General
-
Target
Astral Client.7z
-
Size
1.3MB
-
MD5
9b018caa469e9860e749fdd4aea071b2
-
SHA1
b1b8a881738af77ce0e4dc12eb874470f356569f
-
SHA256
e95f34147355bf5852da3a490cd727b7606d02b10a8d8e0cce6e2564efcbeaff
-
SHA512
f7d007f60abf06aabe5b36dcb97c370232501a25d31f8f038ccdc9e5f28cce85a5d1a1f644b52e4db12e44fdbb7a2a22734c88a9cd753c96d59c5598e6b81843
-
SSDEEP
24576:pcCJkS/YZAsA40IyDf1GOtNLDn+xg6eB9mDtF5vptMwcLFGJ13IOx:eCJkGYGDf1zDnqgPwaxLkJ13I8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Astral Client/Siticone.UI.dll
Files
-
Astral Client.7z.7z
-
Astral Client/Astral.csproj
-
Astral Client/Astral.csproj.user
-
Astral Client/Astral.sln
-
Astral Client/AstralRandom.cs
-
Astral Client/Calls/GEnum0.cs
-
Astral Client/Calls/GEnum1.cs
-
Astral Client/Calls/GEnum2.cs
-
Astral Client/Calls/GEnum3.cs
-
Astral Client/Calls/GEnum4.cs
-
Astral Client/Calls/GEnum5.cs
-
Astral Client/Calls/GStruct2.cs
-
Astral Client/Calls/GStruct3.cs
-
Astral Client/Classes/Locator.cs
-
Astral Client/Classes/Memory.cs
-
Astral Client/Classes/Program.cs
-
Astral Client/Classes/Randomize.cs
-
Astral Client/MainForm.cs
-
Astral Client/MainForm.resx.vbs
-
Astral Client/Modules/CursorVisible.cs
-
Astral Client/Modules/Reach.cs
-
Astral Client/Properties/Resources.Designer.cs
-
Astral Client/Properties/Resources.resx.vbs
-
Astral Client/Resources/Memory
-
Astral Client/Resources/Poppins-Regular.ttf
-
Astral Client/Resources/channels4_profile (1).png.png
-
Astral Client/Siticone.UI.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Astral Client/UI/FlatBindButton.cs.vbs
-
Astral Client/UI/FlatPanel.cs.vbs
-
Astral Client/UI/FlatTrackBar.cs.vbs
-
Astral Client/UI/Paint.cs
-
Astral Client/app.manifest