SynapticsLeak[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

SynapticsLeak.zip
Size

1.1MB
MD5

0be1ac78ad4034d81449a2a79ae2b8c4
SHA1

074fe25540f54842556fc27fe7b2ff25ca8b24f9
SHA256

1ca73899e34b1034a6402101e0e120f8d15c40a3f0c03521a53b90e6c253ea01
SHA512

2632b1d7dc0479bb830be8d6a199fd21be8f608c32200a9fbc911c06bb212fe9cf80ad9b7621a92b2887a55bacd569fca04a8ce887e3449bfd12893f92e0fb35
SSDEEP

24576:VfsROXHfcyfcsS8RNAxiVZgu3INJnvueQff6rs5rpojSmj:V1lBxRNKoeuyPs5rpojVj

Score

3^/10

Malware Config

Signatures

Unsigned PE 9 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SynapticsLeak/Synaptics Exe Src (syn.secure)/bin/Debug/net48/NiggaSploit.dll
unpack001/SynapticsLeak/Synaptics Exe Src (syn.secure)/bin/Debug/net48/Synaptics Internal.exe
unpack001/SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Debug/net48/Synaptics Internal.exe
unpack001/SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/bin/Debug/net48/NiggaSploit.dll
unpack001/SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/Debug/net48/NiggaSploit.dll
unpack001/SynapticsLeak/Working Synaptics Build/CeleryIn.bin
unpack001/SynapticsLeak/Working Synaptics Build/CeleryInject.exe
unpack001/SynapticsLeak/Working Synaptics Build/NiggaSploit.dll
unpack001/SynapticsLeak/Working Synaptics Build/syn.secure

Files

SynapticsLeak.zip
.zip
SynapticsLeak/README.txt
SynapticsLeak/Synaptics Exe Src (syn.secure)/.vs/Synapse_Internal/DesignTimeBuild/.dtbcache.v2
SynapticsLeak/Synaptics Exe Src (syn.secure)/.vs/Synapse_Internal/FileContentIndex/6d1c8725-76a1-4a67-91ef-0ccf81642c0a.vsidx
SynapticsLeak/Synaptics Exe Src (syn.secure)/.vs/Synapse_Internal/v17/.futdcache.v2
SynapticsLeak/Synaptics Exe Src (syn.secure)/.vs/Synapse_Internal/v17/.suo
SynapticsLeak/Synaptics Exe Src (syn.secure)/Properties/AssemblyInfo.cs
SynapticsLeak/Synaptics Exe Src (syn.secure)/Synapse_Internal.csproj
SynapticsLeak/Synaptics Exe Src (syn.secure)/Synapse_Internal/Program.cs
SynapticsLeak/Synaptics Exe Src (syn.secure)/bin/Debug/net48/NiggaSploit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\днс\Downloads\SynapticsLeak\SynapticsLeak\Synaptics Injector Src (NiggaSploit.dll)\obj\Debug\net48\NiggaSploit.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SynapticsLeak/Synaptics Exe Src (syn.secure)/bin/Debug/net48/NiggaSploit.dll.config
SynapticsLeak/Synaptics Exe Src (syn.secure)/bin/Debug/net48/NiggaSploit.pdb
SynapticsLeak/Synaptics Exe Src (syn.secure)/bin/Debug/net48/Synaptics Internal.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\днс\Downloads\SynapticsLeak\SynapticsLeak\Synaptics Exe Src (syn.secure)\obj\Debug\net48\Synaptics Internal.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SynapticsLeak/Synaptics Exe Src (syn.secure)/bin/Debug/net48/Synaptics Internal.exe.config
.xml
SynapticsLeak/Synaptics Exe Src (syn.secure)/bin/Debug/net48/Synaptics Internal.pdb
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Debug/net48/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Debug/net48/Synapse_Internal.GeneratedMSBuildEditorConfig.editorconfig
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Debug/net48/Synapse_Internal.assets.cache
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Debug/net48/Synapse_Internal.csproj.AssemblyReference.cache
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Debug/net48/Synapse_Internal.csproj.CoreCompileInputs.cache
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Debug/net48/Synapse_Internal.csproj.FileListAbsolute.txt
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Debug/net48/Synaptics Internal.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\днс\Downloads\SynapticsLeak\SynapticsLeak\Synaptics Exe Src (syn.secure)\obj\Debug\net48\Synaptics Internal.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Debug/net48/Synaptics Internal.exe.withSupportedRuntime.config
.xml
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Debug/net48/Synaptics Internal.pdb
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Synapse_Internal.csproj.nuget.dgspec.json
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Synapse_Internal.csproj.nuget.g.props
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/Synapse_Internal.csproj.nuget.g.targets
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/project.assets.json
SynapticsLeak/Synaptics Exe Src (syn.secure)/obj/project.nuget.cache
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/.vs/NiggaSploit/DesignTimeBuild/.dtbcache.v2
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/.vs/NiggaSploit/FileContentIndex/0222fa7c-dad1-4529-9fad-fb0d3df6ab8d.vsidx
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/.vs/NiggaSploit/FileContentIndex/35645aad-6c00-4d07-af67-0fccd25a25af.vsidx
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/.vs/NiggaSploit/v17/.futdcache.v2
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/.vs/NiggaSploit/v17/.suo
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/Imports.cs
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/ManualMapApi/MapInject.cs
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/NiggaSploit.Properties/Settings.cs
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/NiggaSploit.csproj
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/Properties/AssemblyInfo.cs
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/Skibidi/BitdancersDrug.cs
.js
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/Skibidi/InjectionStatus.cs
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/Skibidi/MsStorePlayer.cs
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/Util.cs
.js
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/app.config
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/bin/Debug/net48/NiggaSploit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\днс\Downloads\SynapticsLeak\SynapticsLeak\Synaptics Injector Src (NiggaSploit.dll)\obj\Debug\net48\NiggaSploit.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/bin/Debug/net48/NiggaSploit.dll.config
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/bin/Debug/net48/NiggaSploit.pdb
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/Debug/net48/.NETFramework,Version=v4.8.AssemblyAttributes.cs
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/Debug/net48/NiggaSploit.GeneratedMSBuildEditorConfig.editorconfig
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/Debug/net48/NiggaSploit.assets.cache
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/Debug/net48/NiggaSploit.csproj.AssemblyReference.cache
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/Debug/net48/NiggaSploit.csproj.CoreCompileInputs.cache
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/Debug/net48/NiggaSploit.csproj.FileListAbsolute.txt
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/Debug/net48/NiggaSploit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\днс\Downloads\SynapticsLeak\SynapticsLeak\Synaptics Injector Src (NiggaSploit.dll)\obj\Debug\net48\NiggaSploit.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/Debug/net48/NiggaSploit.pdb
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/NiggaSploit.csproj.nuget.dgspec.json
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/NiggaSploit.csproj.nuget.g.props
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/NiggaSploit.csproj.nuget.g.targets
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/project.assets.json
SynapticsLeak/Synaptics Injector Src (NiggaSploit.dll)/obj/project.nuget.cache
SynapticsLeak/Synaptics Ui Src.txt
SynapticsLeak/Working Synaptics Build/CeleryIn.bin
.dll windows:6 windows x64 arch:x64

fe78118d64d767d704fee2343d26ea59

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeaps
HeapWalk
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

vcruntime140

memset
__std_type_info_destroy_list
__C_specific_handler
memcpy

api-ms-win-crt-string-l1-1-0

tolower
strlen

api-ms-win-crt-convert-l1-1-0

_ui64toa_s
_gcvt_s
_itoa_s
_itoa

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
exit
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_execute_onexit_table
_seh_filter_dll
_initterm_e
_initterm

Exports

Exports

celerycmd
icallback
init
test

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SynapticsLeak/Working Synaptics Build/CeleryInject.exe
.exe windows:6 windows x64 arch:x64

2815423b12fff7c32f137d69c0403656

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Javan\Desktop\Projects\Release\CeleryInject.pdb

Imports

kernel32

GetThreadContext
VirtualAllocEx
VirtualProtectEx
ReadProcessMemory
WriteProcessMemory
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalUnlock
GlobalLock
lstrcpynW
lstrcpyW
lstrcatW
lstrlenW
CreateToolhelp32Snapshot
Thread32First
Thread32Next
K32EnumProcessModules
K32GetModuleFileNameExW
K32QueryWorkingSetEx
GetCurrentProcess
ResumeThread
QueryPerformanceCounter
QueryPerformanceFrequency
VirtualQueryEx
OpenProcess
lstrcmpiW
Process32FirstW
Process32NextW
SuspendThread
GetThreadPriority
OpenThread
GetLastError
CloseHandle
GetTempPathW
GetFileAttributesW
DeleteFileW
CreateDirectoryW
lstrlenA
Sleep
TerminateProcess
InitializeSListHead
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime

user32

GetClipboardData
FindWindowW
SetClipboardData
CloseClipboard
FindWindowA
EmptyClipboard
OpenClipboard

msvcp140

?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??Bios_base@std@@QEBA_NXZ
?rdstate@ios_base@std@@QEBAHXZ
?fail@ios_base@std@@QEBA_NXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?_Gnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?_Pnavail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBA_JXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAPEAD0PEAH001@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@AEAD@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?uncaught_exception@std@@YA_NXZ
?_Xout_of_range@std@@YAXPEBD@Z
?good@ios_base@std@@QEBA_NXZ
?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ

urlmon

URLOpenBlockingStreamA

ntdll

RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
NtQueryInformationProcess

shlwapi

PathRemoveFileSpecW

vcruntime140

_purecall
memcpy
memchr
memmove
_CxxThrowException
__std_exception_destroy
memset
__current_exception_context
__current_exception
__C_specific_handler
strchr
memcmp
__std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_c_exit
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_register_thread_local_exe_atexit_callback
_set_app_type
__p___argv
_seh_filter_exe
_cexit
_crt_atexit
system
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
terminate
_configure_narrow_argv
_errno
_invalid_parameter_noinfo_noreturn
exit
__p___argc

api-ms-win-crt-string-l1-1-0

isupper
strnlen
strpbrk
isdigit
toupper
_memicmp
strspn
strcspn
isxdigit
strncat
strncpy
strncmp
islower
tolower
isalpha
isalnum
iscntrl
isgraph
isspace
ispunct

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
_callnewh
malloc

api-ms-win-crt-stdio-l1-1-0

ungetc
fclose
_set_fmode
setvbuf
__stdio_common_vsnprintf_s
fwrite
_fseeki64
fsetpos
fread
__p__commode
fputc
_get_stream_buffer_pointers
__acrt_iob_func
__stdio_common_vfprintf
fflush
__stdio_common_vsprintf
fgetpos
fgetc
__stdio_common_vsprintf_s
_wfopen
__stdio_common_vfwprintf

api-ms-win-crt-utility-l1-1-0

rand
srand

api-ms-win-crt-convert-l1-1-0

strtoul
strtoull
atoi
strtod

api-ms-win-crt-filesystem-l1-1-0

_wmkdir
_waccess_s
_unlock_file
_lock_file
_wstat64

api-ms-win-crt-time-l1-1-0

_difftime64
_gmtime64_s
_localtime64_s
_time64
strftime
clock

api-ms-win-crt-math-l1-1-0

tanh
_dsign
cosh
sqrt
floor
frexp
modf
sinh
round
floorf
acos
sin
cos
pow
asin
atan
tan
atan2
log2
log10
ldexp
log
fmod
__setusermatherr
ceil
exp
ceilf

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SynapticsLeak/Working Synaptics Build/NiggaSploit.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\White Cat\Downloads\km\EvolveAPI\obj\Release\NiggaSploit.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
SynapticsLeak/Working Synaptics Build/NiggaSploit.dll.config
SynapticsLeak/Working Synaptics Build/NiggaSploit.pdb
SynapticsLeak/Working Synaptics Build/Synaptics Internal.exe.config
SynapticsLeak/Working Synaptics Build/Synaptics Internal.pdb
SynapticsLeak/Working Synaptics Build/syn.secure
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\White Cat\source\repos\Synaptics Internal\Synaptics Internal\obj\Release\Synaptics Internal.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 146KB - Virtual size: 145KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 146KB - Virtual size: 145KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 146KB - Virtual size: 145KB

.rsrc Size: 1024B - Virtual size: 904B

.reloc Size: 512B - Virtual size: 12B

fe78118d64d767d704fee2343d26ea59

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1KB - Virtual size: 8KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 40B

2815423b12fff7c32f137d69c0403656

.text
Size: 146KB - Virtual size: 145KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 146KB - Virtual size: 145KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 146KB - Virtual size: 145KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1KB - Virtual size: 8KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 40B

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 736KB - Virtual size: 736KB

.data
Size: 100KB - Virtual size: 107KB

.pdata
Size: 133KB - Virtual size: 133KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 144KB - Virtual size: 143KB

.rsrc
Size: 1024B - Virtual size: 904B

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 12B