1-BunnymodXT-Windows[.]7z

Resubmissions

18/08/2024, 00:01

240818-aa4twsxblm 8

18/08/2024, 00:00

240818-aamklsxbkm 3

17/08/2024, 23:58

240817-31ksxsthka 3

Sharing

Copy URL

Twitter E-mail

General

Target

1-BunnymodXT-Windows.7z
Size

645KB
MD5

5da4f0e181ac3c7c29d430f15cec9aa5
SHA1

ba4fb422097853f05b25abdf9beeae7d1ca8ba05
SHA256

9d6660713ac91ef1f34acff26105d7cdcf24c6b8e21d0250bb73e6af9a0a3eaa
SHA512

717fa98ffa61d3bfd43a1c62c49c2065b5db491ba28ffcab26f63d5cb131fa20fe341e27d670f4a7d496abb2079dbdbd49ea92018ec9e87f69ccab93865de765
SSDEEP

12288:JC5ceJWBtK3dHCqxL8CzTW4biEErqJT3TgzpR3voIsdp/BymivmJ96:U5cOsK3dHCefzTReEAcTEzr3voFFD4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/BunnymodXT.dll

Files

1-BunnymodXT-Windows.7z
.7z
BunnymodXT.dll
.dll windows:6 windows x86 arch:x86

34a67abc7cb64148e34e15b985742740

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

opengl32

glVertex2f
glLineWidth
glDepthMask
glBlendFunc
glColor4f
glDisable
glMatrixMode
glLoadIdentity
glFrustum
glClearColor
glClear
wglGetProcAddress
glTexEnvf
glColor4ub
glBegin
glVertex2i
glEnd
glColor3f
glEnable

kernel32

EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
FreeLibraryAndExitThread
ExitThread
OpenMutexA
ReleaseMutex
CloseHandle
GetSystemTimeAsFileTime
GetSystemInfo
QueryPerformanceCounter
QueryPerformanceFrequency
CreateFileA
WriteFile
GetFileSizeEx
CreateFileMappingA
FormatMessageA
GetProcAddress
GetModuleHandleA
SetLastError
GetLastError
LocalFree
SwitchToThread
Sleep
GetCurrentProcessId
DuplicateHandle
GetCurrentProcess
UnmapViewOfFile
MapViewOfFileEx
SetEndOfFile
SetFilePointer
GetTickCount
LoadLibraryA
LoadLibraryW
LoadLibraryExA
LoadLibraryExW
FreeLibrary
VirtualQuery
VirtualProtect
K32GetModuleInformation
GetModuleHandleW
GetModuleFileNameW
K32EnumProcessModules
AllocConsole
GetStdHandle
GetConsoleScreenBufferInfo
SetConsoleScreenBufferSize
SetConsoleTitleA
GetConsoleWindow
FreeConsole
WriteConsoleA
SetConsoleTextAttribute
WriteConsoleW
OpenEventW
SetEvent
CreateNamedPipeA
CreateEventA
ConnectNamedPipe
DisconnectNamedPipe
WaitForSingleObject
ReadFile
PeekNamedPipe
CreateFileW
WaitNamedPipeW
lstrlenW
MultiByteToWideChar
ReleaseSRWLockExclusive
FreeEnvironmentStringsW
GetConsoleCP
ReleaseSRWLockShared
AcquireSRWLockExclusive
GetCurrentThread
RtlCaptureContext
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
SetEnvironmentVariableW
GetCommandLineW
FlushFileBuffers
SetFilePointerEx
TerminateProcess
WakeAllConditionVariable
SleepConditionVariableSRW
WakeConditionVariable
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
AcquireSRWLockShared
WaitForSingleObjectEx
CreateMutexA
TlsSetValue
FindNextFileW
GetFileInformationByHandle
GetFileInformationByHandleEx
CreateDirectoryW
CreateEventW
GetConsoleMode
GetFileType
ExitProcess
GetFullPathNameW
WideCharToMultiByte
CreateThread
InitOnceBeginInitialize
TlsAlloc
InitOnceComplete
TlsFree
TlsGetValue
InterlockedFlushSList
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
SetStdHandle
HeapSize
FindClose
ReadConsoleW
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ResetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetStringTypeW
LCMapStringEx
DecodePointer
EncodePointer
AreFileApisANSI
HeapCreate
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapDestroy
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
VirtualFree
VirtualAlloc
InitializeSRWLock
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
InitializeConditionVariable
SleepConditionVariableCS
RaiseException
IsProcessorFeaturePresent
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
FindFirstFileExW
GetFileAttributesExW

advapi32

RegCloseKey
RegCreateKeyExW
RegSetValueExW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor

ntdll

NtWriteFile
NtReadFile
RtlNtStatusToDosError

user32

ShowWindow
MessageBoxA

Exports

Exports

bxt_is_tas_editor_active
bxt_on_tas_playback_frame
bxt_on_tas_playback_stopped
bxt_simulation_ipc_is_client_initialized
bxt_tas_load_script_from_string
bxt_tas_new

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 435KB - Virtual size: 434KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 315.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
LICENSE

Resubmissions

Sharing

General

Malware Config

Signatures

Files

34a67abc7cb64148e34e15b985742740

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

kernel32

advapi32

ntdll

user32

Exports

Exports

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 435KB - Virtual size: 434KB

.data Size: 60KB - Virtual size: 315.5MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 94KB - Virtual size: 94KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 435KB - Virtual size: 434KB

.data
Size: 60KB - Virtual size: 315.5MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 94KB - Virtual size: 94KB