D:\Github\EzFishing-il2cpp-cheat\x64\Release\EzFishing.pdb
Static task
static1
1 signatures
General
-
Target
EzFishing v4.5.12.dll
-
Size
1.4MB
-
MD5
a01fb7bf35d3d199ce86fcd10fdda95e
-
SHA1
51398efc4646345c1cb3880457dfb65fc6681e4c
-
SHA256
cb843fbba066b163ff2d2279696cb581034f2e779be35e0a277004b1df125c1e
-
SHA512
01a6b84830e167e8deddbea1bf043ba116c6424eb23f8137365c1b0b4cb32e25e952f19cb39bb6c98fc9ab8c7483697df96298ef55d03d31be5204adcdf98570
-
SSDEEP
24576:crKSAWvFMETlg+awqwUwExIPfA8OLhJ9yp/xCcTOuIrmkSkkkkkjOTRmno:crKSAzuh/qNwffAj3g/bTqSk6Qno
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource EzFishing v4.5.12.dll
Files
-
EzFishing v4.5.12.dll.dll windows:6 windows x64 arch:x64
Password: 1976
0489e829e933aeb0ab056bb0b0d642e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
QueryPerformanceCounter
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
GetProcAddress
FlushInstructionCache
SetThreadContext
OpenThread
GetTickCount64
K32GetModuleInformation
CreateThread
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
GetCurrentProcessId
MultiByteToWideChar
user32
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
GetAsyncKeyState
CallWindowProcA
SetWindowLongPtrA
SetForegroundWindow
DestroyWindow
DefWindowProcA
CreateWindowExA
UnregisterClassA
RegisterClassExA
GetKeyState
GetMessageExtraInfo
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetCursorPos
ReleaseCapture
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
SetCursorPos
IsWindowUnicode
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
d3dcompiler_43
D3DCompile
msvcp140
_Query_perf_counter
?_Xlength_error@std@@YAXPEBD@Z
_Query_perf_frequency
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_destroy_list
_CxxThrowException
memset
memmove
memcpy
memcmp
memchr
__C_specific_handler
__std_exception_copy
__std_exception_destroy
strstr
__std_terminate
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
ftell
__stdio_common_vfprintf
fflush
__stdio_common_vsprintf_s
fclose
fwrite
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fseek
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-string-l1-1-0
strcmp
api-ms-win-crt-heap-l1-1-0
free
malloc
calloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_cexit
_execute_onexit_table
_initterm
_initterm_e
_wassert
_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_register_onexit_function
_configure_narrow_argv
_initialize_onexit_table
_initialize_narrow_environment
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-math-l1-1-0
cosf
sinf
sqrtf
ceilf
acosf
Sections
.text Size: 257KB - Virtual size: 256KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ