C:\Users\Brrainz\Source\Repos\Harmony\Harmony\bin\ReleaseFat\net472\ILRepack-24908-912981\0Harmony.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2009463077 Harmony/1.4/Assemblies/0Harmony.dll
Resource
win10-20240404-es
Behavioral task
behavioral2
Sample
2009463077 Harmony/1.4/Assemblies/HarmonyMod.dll
Resource
win10-20240404-es
Behavioral task
behavioral3
Sample
2009463077 Harmony/Current/Assemblies/0Harmony.dll
Resource
win10-20240404-es
Behavioral task
behavioral4
Sample
2009463077 Harmony/Current/Assemblies/HarmonyMod.dll
Resource
win10-20240404-es
General
-
Target
2009463077_Harmony.zip
-
Size
1.1MB
-
MD5
75a61678538d3103db5ce164558db098
-
SHA1
66a172a8ecc306babff4df322ec4c609403217e8
-
SHA256
777b5c2f38b54f7f47a7a743bff1c3ced553420aef78a3bb0f70668c43054d5c
-
SHA512
2bcfcd4c086c38183e7a1f19baae1842f938d59ecd50ea3909ebed1b21cabf6c187d5c870f8f5688ccb840fa380e0083827bab10f8c26293d69b5c7396cf0748
-
SSDEEP
24576:fR4+fQiYnq2fzAnt9zFWdbp5k5oGCMhasfgNs0q2JETNryrRLC6R35cc:fR4+Y+2A9MtptMMTqLTYLCy
Malware Config
Signatures
-
Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/2009463077 Harmony/1.4/Assemblies/0Harmony.dll unpack001/2009463077 Harmony/1.4/Assemblies/HarmonyMod.dll unpack001/2009463077 Harmony/Current/Assemblies/0Harmony.dll unpack001/2009463077 Harmony/Current/Assemblies/HarmonyMod.dll
Files
-
2009463077_Harmony.zip.zip
-
2009463077 Harmony/1.4/Assemblies/0Harmony.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 908KB - Virtual size: 907KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
2009463077 Harmony/1.4/Assemblies/HarmonyMod.dll.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
2009463077 Harmony/About/About.xml
-
2009463077 Harmony/About/Manifest.xml
-
2009463077 Harmony/About/ModIcon.png.png
-
2009463077 Harmony/About/Preview.png.png
-
2009463077 Harmony/About/PublishedFileId.txt
-
2009463077 Harmony/Current/Assemblies/0Harmony.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
2009463077 Harmony/Current/Assemblies/HarmonyMod.dll.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
2009463077 Harmony/LICENSE
-
2009463077 Harmony/LoadFolders.xml
-
2009463077 Harmony/Readme.md