C:\Users\kakrazz\Desktop\ivisssssssssss\fasd\x64.Release\P402.Rust.pdb
Static task
static1
1 signatures
General
-
Target
invisfree.dll
-
Size
602KB
-
MD5
68b2e9f32a08dff784556276d75b14b5
-
SHA1
73d4ed7d4585dabd73e6feebab52c586356ba373
-
SHA256
2e306bc70d83f2ef62ccfdfa3d7ec6bb56e507d81b07ba836176adc1dd451963
-
SHA512
8f95e7a5b4b7a833283f3bb54b537025399f10378ac1150a94ec2d4bd398a243f1545db05048700278c4cab0db18ddbe9362d1b73f309a0f85fa15c96188a279
-
SSDEEP
12288:II8bNXC9HDdn6zGhds88OLV2sI8C780BxnR9b5nvO2M:IIINXCRDdn6zGhW/PsIH80BxnRt5nG2
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource invisfree.dll
Files
-
invisfree.dll.dll windows:6 windows x64 arch:x64
a72a57ed9034a7c8e354423b6fb3afc7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
MultiByteToWideChar
CloseHandle
lstrlenA
VirtualProtect
QueryPerformanceFrequency
QueryPerformanceCounter
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualQuery
GetLastError
SetLastError
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentThread
K32GetModuleInformation
GetProcAddress
GetModuleHandleA
GetCurrentProcess
GetCurrentThreadId
user32
CallWindowProcW
GetCursorPos
SetCursorPos
ReleaseCapture
GetClientRect
SetCursor
SetCapture
GetForegroundWindow
IsChild
ClientToScreen
GetCapture
ScreenToClient
GetKeyState
SetClipboardData
GetClipboardData
GetSystemMetrics
OpenClipboard
CloseClipboard
EmptyClipboard
msvcp140
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?_Xlength_error@std@@YAXPEBD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?uncaught_exception@std@@YA_NXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
d3dcompiler_47
D3DCompile
imm32
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
memcmp
memchr
__std_terminate
__C_specific_handler
strstr
__std_exception_copy
__std_exception_destroy
strchr
memcpy
memset
__current_exception
__current_exception_context
__std_type_info_destroy_list
_CxxThrowException
api-ms-win-crt-stdio-l1-1-0
_wfopen
fread
__stdio_common_vsscanf
fseek
fclose
fflush
ftell
__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vfprintf
__acrt_iob_func
fwrite
api-ms-win-crt-utility-l1-1-0
qsort
rand
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_initialize_narrow_environment
_seh_filter_dll
_invalid_parameter_noinfo_noreturn
system
_initialize_onexit_table
_register_onexit_function
_initterm_e
_execute_onexit_table
_initterm
terminate
_crt_atexit
_cexit
api-ms-win-crt-string-l1-1-0
strcmp
strncpy
strcpy_s
_stricmp
api-ms-win-crt-convert-l1-1-0
atoi
atof
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
api-ms-win-crt-math-l1-1-0
ceilf
powf
fmodf
pow
asinf
sinf
floorf
acosf
cosf
sqrt
atan2f
sqrtf
Sections
.text Size: 439KB - Virtual size: 438KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 76KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ