C:\Users\Lukse\Downloads\asphyxia-cs2-master\asphyxia-cs2-master\build\Debug\cstrike.pdb
Resubmissions
01-07-2024 12:09
240701-pbp5fs1bne 3Static task
static1
1 signatures
General
-
Target
notarat.exe
-
Size
3.8MB
-
MD5
bbd64a4f6e0b5434a5f877173a860519
-
SHA1
a063e8c1fe0e4dc577aeb7976408e55cb9f98858
-
SHA256
705e1de1170161585a32e3b4874e3e6888c236593fc554f53bcaea053e3a1130
-
SHA512
df77883d33383ea1397e18ea2a5166153396afcf19f1950832774b4650467c0c313acfcacdfe5317f32b860355866d9c942bc247c94303121e08f34272bf70f4
-
SSDEEP
49152:eaSiCYq1OlgIIvsnCldiKI6QMNaLKB6PXo5E4njsy5n:vejcj
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource notarat.exe
Files
-
notarat.exe.dll windows:6 windows x64 arch:x64
4a6f792ef5b94fe6da0eb72860b15cc7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetProcAddress
LoadLibraryA
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
CloseHandle
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
GetModuleHandleW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateDirectoryW
GetLastError
CreateThread
FreeLibraryAndExitThread
CreateFileW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetFileSize
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
GetCommandLineW
ReleaseSRWLockExclusive
GetModuleHandleA
TryAcquireSRWLockExclusive
GetConsoleWindow
SetStdHandle
AllocConsole
FreeConsole
WriteConsoleA
SetConsoleTextAttribute
SetConsoleTitleW
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
HeapQueryInformation
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetCurrentThread
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTempPathW
SetConsoleCtrlHandler
FreeLibrary
QueryPerformanceFrequency
QueryPerformanceCounter
VerSetConditionMask
WideCharToMultiByte
MultiByteToWideChar
GlobalFree
GlobalUnlock
GlobalLock
AcquireSRWLockExclusive
GlobalAlloc
OutputDebugStringW
HeapValidate
HeapSize
ExitProcess
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
RaiseException
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
InitializeCriticalSectionEx
DeleteCriticalSection
RtlUnwindEx
GetModuleFileNameW
LoadLibraryExW
InterlockedPushEntrySList
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
GetStdHandle
GetFileType
GetModuleHandleExW
WriteConsoleW
user32
SetCursorPos
OpenClipboard
CloseClipboard
SetClipboardData
PostMessageW
GetWindow
GetWindowThreadProcessId
EnumWindows
SetWindowLongPtrW
CallWindowProcW
SetProcessDPIAware
MonitorFromWindow
LoadCursorW
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
IsWindowVisible
GetClientRect
ReleaseDC
GetDC
GetForegroundWindow
IsWindowUnicode
ReleaseCapture
SetCapture
GetCapture
GetKeyState
GetMessageExtraInfo
TrackMouseEvent
EmptyClipboard
GetClipboardData
gdi32
DeleteObject
GetDeviceCaps
CreateRectRgn
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
d3dcompiler_47
D3DCompile
dwmapi
DwmGetColorizationColor
DwmIsCompositionEnabled
DwmEnableBlurBehindWindow
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 997KB - Virtual size: 997KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ