d:\ComponentFactory\Build Krypton\Source\Krypton Components\ComponentFactory.Krypton.Toolkit\obj\Release\ComponentFactory.Krypton.Toolkit.pdb
Overview
overview
3Static
static
3SpriteVort...it.dll
windows7-x64
1SpriteVort...it.dll
windows10-2004-x64
1SpriteVort...ex.exe
windows7-x64
1SpriteVort...ex.exe
windows10-2004-x64
1SpriteVort...re.dll
windows7-x64
1SpriteVort...re.dll
windows10-2004-x64
1SpriteVort...ex.dll
windows7-x64
1SpriteVort...ex.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
SpriteVortex1.3 beta/ComponentFactory.Krypton.Toolkit.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
SpriteVortex1.3 beta/ComponentFactory.Krypton.Toolkit.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
SpriteVortex1.3 beta/SpriteVortex.exe
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
SpriteVortex1.3 beta/SpriteVortex.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
SpriteVortex1.3 beta/Vortex.Core.dll
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
SpriteVortex1.3 beta/Vortex.Core.dll
Resource
win10v2004-20240226-en
Behavioral task
behavioral7
Sample
SpriteVortex1.3 beta/Vortex.dll
Resource
win7-20240220-en
Behavioral task
behavioral8
Sample
SpriteVortex1.3 beta/Vortex.dll
Resource
win10v2004-20240508-en
General
-
Target
SpriteVortex1.3_beta.zip
-
Size
1.7MB
-
MD5
5f2aea1ed4f810b712bcf802b6ea10e0
-
SHA1
96a2717ac8c179a76138b9380056fc131f3fb1a9
-
SHA256
c29bfcc3a2fa4e08257b04886004c9a81d3dc254f1159efda0d9c23e5dede2e7
-
SHA512
5253f5ad6cb4ce91e29e55a9e681370a951649c2c8a78d737602a227d7383fc7aba4a63a95aa01c38fc7cee0dfcd1c55162f1cfaa524a2b7358b61e817de9e99
-
SSDEEP
49152:0G2z3X/k0GZ8+7qUXHlTnAYoUh6sLfO8XsE:J2TwZ7VHlTndvo8cE
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/SpriteVortex1.3 beta/ComponentFactory.Krypton.Toolkit.dll unpack001/SpriteVortex1.3 beta/SpriteVortex.exe unpack001/SpriteVortex1.3 beta/Vortex.Core.dll unpack001/SpriteVortex1.3 beta/Vortex.dll
Files
-
SpriteVortex1.3_beta.zip.zip
-
SpriteVortex1.3 beta/ComponentFactory.Krypton.Toolkit.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SpriteVortex1.3 beta/Data/FONTS/segoe_ui_15.fnt
-
SpriteVortex1.3 beta/Data/FONTS/segoe_ui_15_0.png.png
-
SpriteVortex1.3 beta/Data/GFX/click1.png.png
-
SpriteVortex1.3 beta/Data/GFX/click2.png.png
-
SpriteVortex1.3 beta/Data/GFX/click3.png.png
-
SpriteVortex1.3 beta/Data/GFX/guiPanel2.png.png
-
SpriteVortex1.3 beta/Data/GFX/guiPanel3.png.png
-
SpriteVortex1.3 beta/Data/GFX/gui_button_normal.png.png
-
SpriteVortex1.3 beta/Data/GFX/gui_button_overlay.png.png
-
SpriteVortex1.3 beta/Data/GFX/gui_button_pressed.png.png
-
SpriteVortex1.3 beta/Data/GFX/guipanel.png.png
-
SpriteVortex1.3 beta/Data/GFX/movehor1.png.png
-
SpriteVortex1.3 beta/Data/GFX/movehor2.png.png
-
SpriteVortex1.3 beta/Data/GFX/movehor3.png.png
-
SpriteVortex1.3 beta/Data/GFX/movehor4.png.png
-
SpriteVortex1.3 beta/Data/GFX/movevert1.png.png
-
SpriteVortex1.3 beta/Data/GFX/movevert2.png.png
-
SpriteVortex1.3 beta/Data/GFX/movevert3.png.png
-
SpriteVortex1.3 beta/Data/GFX/movevert4.png.png
-
SpriteVortex1.3 beta/Data/GFX/pick1.png.png
-
SpriteVortex1.3 beta/Data/GFX/pick2.png.png
-
SpriteVortex1.3 beta/Data/GFX/pick3.png.png
-
SpriteVortex1.3 beta/SpriteVortex.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
E:\Compartilhada\Dev\SpriteVortex\SpriteVortex\obj\x86\Release\SpriteVortex.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 591KB - Virtual size: 591KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SpriteVortex1.3 beta/Vortex.Core.dll.dll windows:5 windows x86 arch:x86
42b3ad99dc8aab3a7b7e81dc4caad538
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
e:\Compartilhada\Dev\Vortex2D\Vortex.Core\Temp\Release\Vortex.Core.pdb
Imports
msvcr90
fclose
tmpfile
_crt_debugger_hook
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
malloc
_except_handler3
strncpy
_CIcosh
_CIexp
_CIfmod
_CIsinh
fread
_CItanh
ceil
_fpclass
sprintf
exit
__CxxFrameHandler
strchr
_isnan
qsort
memmove
atoi
toupper
strncmp
isxdigit
isalpha
isalnum
tolower
atof
_stricmp
_snprintf
_finite
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
fwrite
fseek
memcpy
??2@YAPAXI@Z
memset
_cexit
__FrameUnwindFilter
_controlfp
longjmp
_setjmp3
isdigit
isspace
_ftol
_CIpow
_vsnprintf
sscanf
frexp
_strdate
_strtime
ldexp
_strdup
setlocale
floor
_CIasin
_CIacos
kernel32
HeapAlloc
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
GetSystemInfo
lstrcmpiA
GetFullPathNameA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
GetProcessHeap
InterlockedExchange
HeapFree
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FindResourceA
SizeofResource
Sleep
FindResourceW
WideCharToMultiByte
GetModuleHandleW
QueryPerformanceFrequency
LoadLibraryA
GetProcAddress
GetModuleHandleA
OutputDebugStringA
WriteFile
GetLastError
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateFileA
CreateFileW
GetVersionExA
CloseHandle
UnmapViewOfFile
LockResource
LoadResource
d3d9
Direct3DCreate9
dinput8
DirectInput8Create
user32
GetCursorPos
WindowFromPoint
PeekMessageW
TranslateMessage
DispatchMessageW
GetMessageW
WaitMessage
RegisterClassW
CreateWindowExW
PostQuitMessage
SetCursor
SetCapture
ReleaseCapture
DefWindowProcW
GetDC
ReleaseDC
GetWindowRect
SetWindowLongW
MoveWindow
AdjustWindowRectEx
SetForegroundWindow
SetFocus
SetWindowTextW
DestroyWindow
UnregisterClassW
LoadCursorW
GetClientRect
ShowWindow
gdi32
GetDeviceCaps
DeleteObject
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
ole32
CoCreateInstance
mscoree
CorBindToRuntimeEx
_CorDllMain
Sections
.text Size: 843KB - Virtual size: 842KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 486KB - Virtual size: 485KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SpriteVortex1.3 beta/Vortex.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
E:\Compartilhada\Dev\Vortex2D\Vortex\obj\Release\Vortex.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 984B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ