C:\a\deno\deno\target\release\deps\deno.pdb
Static task
static1
Behavioral task
behavioral1
Sample
silverbullet.exe
Resource
win11-20240704-en
General
-
Target
silverbullet.exe
-
Size
102.6MB
-
MD5
1cea74deeb71f7a80025f978b66d8568
-
SHA1
2265f305cecb50b8cf26c5d2d619a252a715e94e
-
SHA256
40a38d7142fdd7aac373b63f8a460a9f228734893d6d8d5092ecd8647df33f03
-
SHA512
878db1b4f80dc2ea20a8596a0f9108c195f8afea8991675fbb366299edb5341f288fda3a2d28d7606cd39d8caed616806286f758d37dc166f3ede7b1f7fd6c85
-
SSDEEP
786432:iSP5++z/TFWsQMbTHBo09quYZlCUCNiZ4Niie/ju9PU:/L/ZLbTHBBSZbsNiie/joPU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource silverbullet.exe
Files
-
silverbullet.exe.exe windows:6 windows x64 arch:x64
97729c0be10f2e7598e7254f9ad74036
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
SetThreadStackGuarantee
GetLastError
TryAcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetCurrentProcess
DuplicateHandle
lstrlenW
AcquireSRWLockExclusive
SetLastError
GetFullPathNameW
DeviceIoControl
FreeEnvironmentStringsW
GetConsoleScreenBufferInfo
HeapReAlloc
GetStdHandle
CreateFileA
SetStdHandle
GetHandleInformation
HeapAlloc
GetProcessHeap
HeapFree
GetConsoleMode
SetConsoleMode
SetConsoleTextAttribute
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcessId
CreateMutexA
ReleaseMutex
RtlLookupFunctionEntry
GetProcAddress
GetCurrentThread
RtlCaptureContext
AcquireSRWLockShared
ReleaseSRWLockShared
WakeAllConditionVariable
SleepConditionVariableSRW
GlobalUnlock
SetThreadErrorMode
LoadLibraryExW
Sleep
TryAcquireSRWLockShared
FormatMessageW
CreateFileW
GetFileInformationByHandle
SetCurrentDirectoryW
CreateIoCompletionPort
GetSystemInfo
GetPriorityClass
SetPriorityClass
GetFileType
WriteConsoleInputW
PeekConsoleInputW
FlushConsoleInputBuffer
TerminateProcess
CreateNamedPipeW
ConnectNamedPipe
GlobalMemoryStatusEx
GetTickCount64
CreateToolhelp32Snapshot
Process32First
Process32Next
FreeLibrary
LoadLibraryW
FindClose
CreateEventA
SetErrorMode
WideCharToMultiByte
SetFileTime
LockFileEx
UnlockFile
GetFileInformationByHandleEx
UnmapViewOfFile
VirtualProtect
CreateFileMappingW
MapViewOfFile
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus
ReadFile
GetOverlappedResult
WriteFile
CancelIoEx
SetFileCompletionNotificationModes
CreateSemaphoreW
CancelIo
ReadDirectoryChangesW
ReleaseSemaphore
CreatePipe
GetModuleHandleA
WakeConditionVariable
WaitForMultipleObjects
GetNumberOfConsoleInputEvents
ResetEvent
GlobalLock
GlobalSize
ReadConsoleInputW
GetConsoleCursorInfo
SetConsoleCursorInfo
SetConsoleCursorPosition
WriteConsoleW
FillConsoleOutputCharacterA
FillConsoleOutputAttribute
VirtualQuery
IsThreadAFiber
ConvertThreadToFiber
CreateFiber
SwitchToFiber
DeleteFiber
ConvertFiberToThread
MultiByteToWideChar
CreateWaitableTimerExW
SetWaitableTimer
QueryPerformanceFrequency
GetModuleHandleW
GetCurrentDirectoryW
RtlVirtualUnwind
GetEnvironmentVariableW
GetEnvironmentStringsW
SetEnvironmentVariableW
GetTempPathW
GetModuleFileNameW
GetCommandLineW
FlushFileBuffers
SetFileInformationByHandle
GetFinalPathNameByHandleW
AddVectoredExceptionHandler
FindNextFileW
CreateDirectoryW
FindFirstFileW
ReadConsoleW
CompareStringOrdinal
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
CreateThread
ReadFileEx
SleepEx
WriteFileEx
GetExitCodeProcess
CreateEventW
ExitProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
DeleteFileW
MoveFileExW
RemoveDirectoryW
CreateSymbolicLinkW
CreateHardLinkW
SetFileAttributesW
CopyFileExW
SetHandleInformation
RegisterWaitForSingleObject
UnregisterWaitEx
GetProcessId
SetConsoleCtrlHandler
RemoveVectoredExceptionHandler
LoadLibraryExA
VirtualAlloc
VirtualFree
GetTickCount
FormatMessageA
GetSystemTime
SystemTimeToFileTime
GetFileSize
LocalFree
HeapDestroy
HeapCompact
DeleteFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
GetTempPathA
HeapSize
HeapValidate
CreateMutexW
UnlockFileEx
SetEndOfFile
GetFullPathNameA
SetFilePointer
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
HeapCreate
AreFileApisANSI
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetNativeSystemInfo
SetUnhandledExceptionFilter
RtlCaptureStackBackTrace
GetLocaleInfoEx
IsDebuggerPresent
GetTimeZoneInformation
GetTempFileNameA
VerSetConditionMask
VerifyVersionInfoW
MapViewOfFileEx
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
QueryThreadCycleTime
GetThreadPriority
SetThreadPriority
RtlAddFunctionTable
RtlDeleteFunctionTable
FlsAlloc
FlsGetValue
FlsSetValue
GetDynamicTimeZoneInformation
GetUserGeoID
GetGeoInfoW
CreateSemaphoreA
InitializeConditionVariable
SuspendThread
GetThreadContext
ResumeThread
ResolveLocaleName
GetCurrencyFormatEx
GetNumberFormatEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDateFormatEx
GetTimeFormatEx
FindFirstFileExW
GetOEMCP
GetACP
IsValidCodePage
GetStringTypeW
GetFileSizeEx
GetConsoleOutputCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
WaitForSingleObject
OpenProcess
CloseHandle
SetFilePointerEx
SwitchToThread
GetTimeFormatW
GetDateFormatW
FlsFree
GetCommandLineA
GetCPInfo
FreeLibraryAndExitThread
ExitThread
GetModuleHandleExW
InitializeCriticalSectionAndSpinCount
EncodePointer
InterlockedPushEntrySList
RtlUnwindEx
GetStartupInfoW
InitializeSListHead
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlUnwind
RaiseException
RtlPcToFileHeader
user32
OpenClipboard
MapVirtualKeyW
CloseClipboard
GetClipboardData
GetClientRect
RegisterClassExA
CreateWindowExA
GetDC
DefWindowProcA
shell32
SHGetFolderPathW
SHGetKnownFolderPath
gdi32
SetPixelFormat
GetPixelFormat
ChoosePixelFormat
DescribePixelFormat
ntdll
RtlNtStatusToDosError
NtDeviceIoControlFile
NtCancelIoFileEx
RtlGetVersion
NtCreateFile
NtQuerySystemInformation
NtWriteFile
NtReadFile
opengl32
wglGetProcAddress
wglMakeCurrent
wglDeleteContext
wglCreateContext
wglGetCurrentContext
crypt32
CertCloseStore
CertFreeCertificateContext
CertVerifyTimeValidity
CertGetEnhancedKeyUsage
CertDuplicateCertificateContext
CertOpenStore
CertEnumCertificatesInStore
ole32
CoTaskMemFree
advapi32
EventWriteTransfer
SystemFunction036
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
LookupPrivilegeValueW
OpenProcessToken
EventSetInformation
EventRegister
AdjustTokenPrivileges
RegQueryInfoKeyW
RegEnumKeyExW
GetUserNameW
ws2_32
accept
WSASocketW
connect
shutdown
getsockopt
recv
listen
getaddrinfo
freeaddrinfo
WSACleanup
getpeername
ioctlsocket
socket
WSAIoctl
recvfrom
bind
getsockname
WSAStartup
GetHostNameW
sendto
send
WSAGetLastError
setsockopt
closesocket
WSASend
psapi
GetPerformanceInfo
GetProcessMemoryInfo
iphlpapi
GetAdaptersAddresses
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
bcrypt
BCryptGenRandom
d3dcompiler_47
D3DCompile
oleaut32
SysStringLen
GetErrorInfo
SysFreeString
dbghelp
StackWalk64
SymSetOptions
SymInitialize
SymGetSearchPathW
SymSetSearchPathW
SymGetModuleBase64
SymFunctionTableAccess64
SymGetLineFromAddr64
SymFromAddr
Exports
Exports
CrashForExceptionInNonABICompliantCodeRange
OnigDefaultCaseFoldFlag
OnigDefaultSyntax
OnigEncodingASCII
OnigEncodingUTF8
OnigSyntaxOniguruma
OnigSyntaxRuby
napi_acquire_threadsafe_function
napi_add_env_cleanup_hook
napi_add_finalizer
napi_adjust_external_memory
napi_async_destroy
napi_async_init
napi_call_function
napi_call_threadsafe_function
napi_cancel_async_work
napi_close_callback_scope
napi_close_escapable_handle_scope
napi_close_handle_scope
napi_coerce_to_bool
napi_coerce_to_number
napi_coerce_to_object
napi_coerce_to_string
napi_create_array
napi_create_array_with_length
napi_create_arraybuffer
napi_create_async_work
napi_create_bigint_int64
napi_create_bigint_uint64
napi_create_bigint_words
napi_create_buffer
napi_create_buffer_copy
napi_create_dataview
napi_create_date
napi_create_double
napi_create_error
napi_create_external
napi_create_external_arraybuffer
napi_create_external_buffer
napi_create_function
napi_create_int32
napi_create_int64
napi_create_object
napi_create_promise
napi_create_range_error
napi_create_reference
napi_create_string_latin1
napi_create_string_utf16
napi_create_string_utf8
napi_create_symbol
napi_create_threadsafe_function
napi_create_type_error
napi_create_typedarray
napi_create_uint32
napi_define_class
napi_define_properties
napi_delete_async_work
napi_delete_element
napi_delete_property
napi_delete_reference
napi_detach_arraybuffer
napi_escape_handle
napi_fatal_error
napi_fatal_exception
napi_get_all_property_names
napi_get_and_clear_last_exception
napi_get_array_length
napi_get_arraybuffer_info
napi_get_boolean
napi_get_buffer_info
napi_get_cb_info
napi_get_dataview_info
napi_get_date_value
napi_get_element
napi_get_global
napi_get_instance_data
napi_get_last_error_info
napi_get_named_property
napi_get_new_target
napi_get_node_version
napi_get_null
napi_get_property
napi_get_property_names
napi_get_prototype
napi_get_reference_value
napi_get_threadsafe_function_context
napi_get_typedarray_info
napi_get_undefined
napi_get_uv_event_loop
napi_get_value_bigint_int64
napi_get_value_bigint_uint64
napi_get_value_bigint_words
napi_get_value_bool
napi_get_value_double
napi_get_value_external
napi_get_value_int32
napi_get_value_int64
napi_get_value_string_latin1
napi_get_value_string_utf16
napi_get_value_string_utf8
napi_get_value_uint32
napi_get_version
napi_has_element
napi_has_named_property
napi_has_own_property
napi_has_property
napi_instanceof
napi_is_array
napi_is_arraybuffer
napi_is_buffer
napi_is_dataview
napi_is_date
napi_is_detached_arraybuffer
napi_is_error
napi_is_exception_pending
napi_is_promise
napi_is_typedarray
napi_make_callback
napi_module_register
napi_new_instance
napi_object_freeze
napi_object_seal
napi_open_callback_scope
napi_open_escapable_handle_scope
napi_open_handle_scope
napi_queue_async_work
napi_ref_threadsafe_function
napi_reference_ref
napi_reference_unref
napi_reject_deferred
napi_release_threadsafe_function
napi_remove_env_cleanup_hook
napi_remove_wrap
napi_resolve_deferred
napi_run_script
napi_set_element
napi_set_instance_data
napi_set_named_property
napi_set_property
napi_strict_equals
napi_throw
napi_throw_error
napi_throw_range_error
napi_throw_type_error
napi_typeof
napi_unref_threadsafe_function
napi_unwrap
napi_wrap
node_api_create_syntax_error
node_api_get_module_file_name
node_api_throw_syntax_error
onig_builtin_cmp
onig_builtin_count
onig_builtin_error
onig_builtin_fail
onig_builtin_max
onig_builtin_mismatch
onig_builtin_total_count
onig_callout_tag_is_exist_at_callout_num
onig_copy_encoding
onig_end
onig_error_code_to_str
onig_foreach_name
onig_free
onig_free_body
onig_free_match_param
onig_free_match_param_content
onig_get_arg_by_callout_args
onig_get_args_num_by_callout_args
onig_get_callback_each_match
onig_get_callout_data
onig_get_callout_data_by_callout_args
onig_get_callout_data_by_callout_args_self
onig_get_callout_data_by_callout_args_self_dont_clear_old
onig_get_callout_data_by_tag
onig_get_callout_data_by_tag_dont_clear_old
onig_get_callout_data_dont_clear_old
onig_get_callout_in_by_callout_args
onig_get_callout_name_by_name_id
onig_get_callout_num_by_callout_args
onig_get_callout_num_by_tag
onig_get_callout_tag_end
onig_get_callout_tag_start
onig_get_capture_range_in_callout
onig_get_capture_tree
onig_get_case_fold_flag
onig_get_contents_by_callout_args
onig_get_contents_end_by_callout_args
onig_get_current_by_callout_args
onig_get_default_case_fold_flag
onig_get_encoding
onig_get_match_stack_limit_size
onig_get_name_id_by_callout_args
onig_get_options
onig_get_parse_depth_limit
onig_get_passed_args_num_by_callout_args
onig_get_progress_callout
onig_get_regex_by_callout_args
onig_get_retraction_callout
onig_get_retry_counter_by_callout_args
onig_get_retry_limit_in_match
onig_get_retry_limit_in_search
onig_get_right_range_by_callout_args
onig_get_start_by_callout_args
onig_get_string_by_callout_args
onig_get_string_end_by_callout_args
onig_get_subexp_call_limit_in_search
onig_get_subexp_call_max_nest_level
onig_get_syntax
onig_get_used_stack_size_in_callout
onig_initialize
onig_initialize_encoding
onig_initialize_match_param
onig_is_error_code_needs_param
onig_match
onig_match_with_param
onig_name_to_backref_number
onig_name_to_group_numbers
onig_new
onig_new_match_param
onig_noname_group_capture_is_active
onig_number_of_capture_histories
onig_number_of_captures
onig_number_of_names
onig_reg_init
onig_region_clear
onig_region_copy
onig_region_free
onig_region_init
onig_region_new
onig_region_resize
onig_region_set
onig_regset_add
onig_regset_free
onig_regset_get_regex
onig_regset_get_region
onig_regset_new
onig_regset_number_of_regex
onig_regset_replace
onig_regset_search
onig_regset_search_with_param
onig_scan
onig_search
onig_search_with_param
onig_set_callback_each_match
onig_set_callout_data
onig_set_callout_data_by_callout_args
onig_set_callout_data_by_callout_args_self
onig_set_callout_data_by_tag
onig_set_callout_of_name
onig_set_callout_user_data_of_match_param
onig_set_capture_num_limit
onig_set_default_case_fold_flag
onig_set_match_stack_limit_size
onig_set_match_stack_limit_size_of_match_param
onig_set_parse_depth_limit
onig_set_progress_callout
onig_set_progress_callout_of_match_param
onig_set_retraction_callout
onig_set_retraction_callout_of_match_param
onig_set_retry_limit_in_match
onig_set_retry_limit_in_match_of_match_param
onig_set_retry_limit_in_search
onig_set_retry_limit_in_search_of_match_param
onig_set_subexp_call_limit_in_search
onig_set_subexp_call_max_nest_level
onig_set_verb_warn_func
onig_set_warn_func
onig_setup_builtin_monitors_by_ascii_encoded_name
onig_unicode_define_user_property
onigenc_get_default_encoding
onigenc_get_left_adjust_char_head
onigenc_get_prev_char_head
onigenc_get_right_adjust_char_head
onigenc_get_right_adjust_char_head_with_prev
onigenc_init
onigenc_is_valid_mbc_string
onigenc_set_default_caseconv_table
onigenc_set_default_encoding
onigenc_step_back
onigenc_str_bytelen_null
onigenc_strdup
onigenc_strlen
onigenc_strlen_null
Sections
.text Size: 51.0MB - Virtual size: 51.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34.8MB - Virtual size: 34.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 255KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 239KB - Virtual size: 239KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ