ada0df545bb77455e0f1764924944472_JaffaCakes118
- SHA256 cab43de74702f11eee7a9913a355863b17ebba7f5eb051120bc9fce8aafd117c
Overview
overview
8Static
static
3Combo Mine....0.dll
windows7-x64
1Combo Mine....0.dll
windows10-2004-x64
1Combo Mine...ky.exe
windows7-x64
7Combo Mine...ky.exe
windows10-2004-x64
7Combo Mine... 2.lnk
windows7-x64
3Combo Mine... 2.lnk
windows10-2004-x64
7Combo Mine...be.lnk
windows7-x64
3Combo Mine...be.lnk
windows10-2004-x64
7Combo Mine...et.dll
windows7-x64
1Combo Mine...et.dll
windows10-2004-x64
1Combo Mine...ER.exe
windows7-x64
7Combo Mine...ER.exe
windows10-2004-x64
7Combo Mine...ER.exe
windows7-x64
8Combo Mine...ER.exe
windows10-2004-x64
8Combo Mine...er.dll
windows7-x64
1Combo Mine...er.dll
windows10-2004-x64
1Combo Mine...et.dll
windows7-x64
1Combo Mine...et.dll
windows10-2004-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Combo Minecraft/Minecraft Checker/MetroSuite 2.0.dll
Resource
win7-20240705-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Combo Minecraft/Minecraft Checker/MetroSuite 2.0.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
Combo Minecraft/Minecraft Checker/Minecraft Checker by xRisky.exe
Resource
win7-20240704-en
windows7-x64
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
Combo Minecraft/Minecraft Checker/Minecraft Checker by xRisky.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral5
Sample
Combo Minecraft/Minecraft Checker/YouTube 2.lnk
Resource
win7-20240708-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral6
Sample
Combo Minecraft/Minecraft Checker/YouTube 2.lnk
Resource
win10v2004-20240802-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral7
Sample
Combo Minecraft/Minecraft Checker/YouTube.lnk
Resource
win7-20240729-en
windows7-x64
6 signatures
150 seconds
Behavioral task
behavioral8
Sample
Combo Minecraft/Minecraft Checker/YouTube.lnk
Resource
win10v2004-20240802-en
windows10-2004-x64
9 signatures
150 seconds
Behavioral task
behavioral9
Sample
Combo Minecraft/Minecraft Checker/xNet.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
Combo Minecraft/Minecraft Checker/xNet.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
Combo Minecraft/SLAYER Leecher v0.5/._cache_SLAYER Leecher v0.5 By X-SLAYER.exe
Resource
win7-20240708-en
windows7-x64
10 signatures
150 seconds
Behavioral task
behavioral12
Sample
Combo Minecraft/SLAYER Leecher v0.5/._cache_SLAYER Leecher v0.5 By X-SLAYER.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
13 signatures
150 seconds
Behavioral task
behavioral13
Sample
Combo Minecraft/SLAYER Leecher v0.5/SLAYER Leecher v0.5 By X-SLAYER.exe
Resource
win7-20240705-en
windows7-x64
15 signatures
150 seconds
Behavioral task
behavioral14
Sample
Combo Minecraft/SLAYER Leecher v0.5/SLAYER Leecher v0.5 By X-SLAYER.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
20 signatures
150 seconds
Behavioral task
behavioral15
Sample
Combo Minecraft/SLAYER Leecher v0.5/SkinSoft.VisualStyler.dll
Resource
win7-20240708-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral16
Sample
Combo Minecraft/SLAYER Leecher v0.5/SkinSoft.VisualStyler.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral17
Sample
Combo Minecraft/SLAYER Leecher v0.5/xNet.dll
Resource
win7-20240704-en
windows7-x64
0 signatures
150 seconds
Behavioral task
behavioral18
Sample
Combo Minecraft/SLAYER Leecher v0.5/xNet.dll
Resource
win10v2004-20240802-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target ada0df545bb77455e0f1764924944472_JaffaCakes118
- Size 4.1MB
- Sample240820-dfry3athmq
- SHA256 cab43de74702f11eee7a9913a355863b17ebba7f5eb051120bc9fce8aafd117c
- MD5 ada0df545bb77455e0f1764924944472
- SHA1 1a4fb4d155c8231498973294ccb754a40be71159
- SHA512 5662cc34a7df52d7b7c6de4883222916acecae3daaad39b627e8bc081a328ade7a0dddb87747ef018fa2ad2ad3109c5b322ed475cbe0d4bdc4b497aff18d0517
- SSDEEP 98304:UGXiDU0/61VWHNQqjx8rxJt2e8380ZezozWMB:RT0/610HC72xQEztB
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/Combo Minecraft/Minecraft Checker/MetroSuite 2.0.dll unpack001/Combo Minecraft/Minecraft Checker/Minecraft Checker by xRisky.exe unpack001/Combo Minecraft/Minecraft Checker/xNet.dll unpack001/Combo Minecraft/SLAYER Leecher v0.5/._cache_SLAYER Leecher v0.5 By X-SLAYER.exe unpack001/Combo Minecraft/SLAYER Leecher v0.5/SLAYER Leecher v0.5 By X-SLAYER.exe unpack001/Combo Minecraft/SLAYER Leecher v0.5/SkinSoft.VisualStyler.dll unpack001/Combo Minecraft/SLAYER Leecher v0.5/xNet.dll
File Explorer
-
ada0df545bb77455e0f1764924944472_JaffaCakes118.rar 4.1MB
-
Combo Minecraft/Key FA.txt7KB
-
Combo Minecraft/Keywords OP.txt4KB
-
Combo Minecraft/Keywords Para Nfa.txt6KB
-
Combo Minecraft/Keywords SFA.txt7KB
-
Combo Minecraft/Keywords Unmigrated.txt5KB
-
Combo Minecraft/Minecraft Checker/MetroSuite 2.0.dll.dll 305KB
-
Combo Minecraft/Minecraft Checker/Minecraft Checker by xRisky.exe.exe 2.5MB
-
Combo Minecraft/Minecraft Checker/Read before using.txt884B
-
Combo Minecraft/Minecraft Checker/YouTube 2.lnk.lnk 1KB
-
Combo Minecraft/Minecraft Checker/YouTube.lnk.lnk 1KB
-
Combo Minecraft/Minecraft Checker/xNet.dll.dll 104KB
-
Combo Minecraft/SLAYER Leecher v0.5/._cache_SLAYER Leecher v0.5 By X-SLAYER.exe.exe 1.1MB
-
Combo Minecraft/SLAYER Leecher v0.5/SLAYER Leecher v0.5 By X-SLAYER.exe.exe 1.8MB
-
Combo Minecraft/SLAYER Leecher v0.5/SkinSoft.VisualStyler.dll.dll 964KB
-
Combo Minecraft/SLAYER Leecher v0.5/xNet.dll.dll 116KB
Combo Minecraft/Key FA.txt
- SHA256 8f5b3f0e6183d3ea821230378af281c25208cedc97104a9e2d53da1848513d1e
- MD5 89e62531182d5a384d3b0dec84616347
- SHA1 61d74a56abb7a66911c0b2e0e2b619626b12186e
- SHA512 eceb5352f8c1267da4c076677a38c1264747f5a708fdabadd0ca87c2b98ee171ec8ed53951807caf0864a9aeb90c937a886c4f9c406f0419cfb30dff7272fe92
- SSDEEP 192:TTd1g5VtBxXZ4lQ2tWFLTpBOMvePyQ+lW+2L3TUAyLhUGWB:TJe5nBxXelLWFL9/cLGWB
- MD5 SHA1 SHA512 SSDEEP
Combo Minecraft/Keywords OP.txt
- SHA256 742fda9d66a061fe3d001636ad0c3ec169e94e9fe4139001ec0eed8b8d8127bd
- MD5 04c878b604b7cff957a07de2a39b421d
- SHA1 732550710deb1bcd982c6f7fe51ce2c3ac39451f
- SHA512 c63d1b67f99cdfb885efca01383cf54975d40af8e5348f0354ab9ec8f31db312eb0308392f5961efca91fbd819cdd751ede1e33d59b165b20ebe30b8aa1c1adb
- SSDEEP 96:vHRUvb6BXTe82BRu2vr2KOFNTTKHRUvb6Bv108APRu2vr2KOFNTf:vHRgWBXK88RuoKK8NTTKHRgWBva8uRuf
- MD5 SHA1 SHA512 SSDEEP
Combo Minecraft/Keywords Para Nfa.txt
- SHA256 d4d7bb1e7c8c35190e41186795e1d19479d32a3f5a087be07154efa86aabbd4f
- MD5 a20c1ba5f236c7681dfe31f8c52cf1e5
- SHA1 a31aca0234842bc806e1a7429cca568ceb42bacc
- SHA512 98e78565a3758c1c0ea4b17cc9338925c9ffc2c4f2cc38a0166c51ec2ac20422ebeaa0900798cd39bef60bd216efeafbf0c97edf5f5ddd23ca872c6f61ea1e3b
- SSDEEP 192:7d1g5VtBxXZ4lQ2tWFLTpBOMvePyQ+lW+2L3TUAyLhB:xe5nBxXelLWFL9/c0
- MD5 SHA1 SHA512 SSDEEP
Combo Minecraft/Keywords SFA.txt
- SHA256 186d33ca147972a650dc9ba84c1e84321a48bf1ffe2ff3f6a72337b5e653d6c0
- MD5 82d2ba2c218e4ec1cf49e13947a61192
- SHA1 7d976843b3bbeed72e3a7639a0ddaeeed38f3dd8
- SHA512 ca35a617d9631e5a2c0a4484b58908fb102571d579f7353efe204f9eecfcb2d2355320e6b7d84a85d3efc3af3d8acf049e7e326c03adabf420594e73218ee548
- SSDEEP 192:Wd1g5VtBxXZ4lQ2tWFLTpBOMvePyQ+lW+2L3TUAyLhUGWB:we5nBxXelLWFL9/cLGWB
- MD5 SHA1 SHA512 SSDEEP
Combo Minecraft/Keywords Unmigrated.txt
- SHA256 564e29b073743967fae58374be7e7c07d3bee7a13e2542b5aa21173632bd26cf
- MD5 b04d2d89d4a88230575a11fb134a31c5
- SHA1 bc94e41514cef032422f86032e039621acc253ab
- SHA512 d4455c71fab9d44e0c988a757b2bd2ff8032de52bffc86f230cac38a548f1958956de785612baf417f06411f5262ce29f1edf24a76bc06172e43ffe0396b540c
- SSDEEP 96:+87nLYgKgUgfpg3sW4Asl3ufS9f9wsJsM9cv9Mk697sC9eRlgMQLedV4NQ7wT15K:FLTpBOMvePyQ+lW+2L3TUAyLhUGWB
- MD5 SHA1 SHA512 SSDEEP
Combo Minecraft/Minecraft Checker/MetroSuite 2.0.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 8604bf2a1fe2e94dc1ea1fbd0cf54e77303493b93994df48479dc683580aa654
- MD5 0d30a398cec0ff006b6ea2b52d11e744
- SHA1 4ceebd9c6180a321c4d4f3cfb5cfc3952bf72b45
- SHA512 8e06ff131a81e73b1ff5de78262701a11ecc2bcdaf41011f4e96f11c5372742478e70b6a0901b61953c21c95725532af8d785654405ec5066ad157e2143467cc
- SSDEEP 3072:K6J2UBugOAI+yjNDWswy1MNo1EvnvkgvloSVQBjDifX0pPSRZ9KZdf8uvqtXfZBF:K6Jr8xhFzfOaa3xqQnQGTO
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
305726
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Martin\Documents\Visual Studio 2013\Projects\MetroSuite 2.0\MetroSuite 2.0\obj\Debug\MetroSuite 2.0.pdb
mscoree
_CorDllMain
Name
.text
Size
291KB
Virtual Size
290KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.sdata
Size
512B
Virtual Size
312B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Combo Minecraft/Minecraft Checker/Minecraft Checker by xRisky.exe
- IMPHASH ae2946d958311115e85d738fa4c8b7c2
- SHA256 aee7b1aa2aea4d68f2dec1b7d4d704640c202152bff530ca51e19add52d5b5fd
- MD5 5e437613c9ff5ebac652c1bcdfd3b09b
- SHA1 68d0706818698a8abc16964e405b601076abea40
- SHA512 9ad15bb1ddf44bf9ffe333af94847a512a76b58de337189e0748495c3f7a1f8c776a310d773412d299f73c89db72b9f7c68543d43137c5a1980ae8f3e2dffd9b
- SSDEEP 49152:3ITe1ItLD2qOVM9q9QhRp8Xbo5AaT0cCRX97S:JGpaqQKQyuo5PT0G
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
5
Entry point
784832
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
kernel32
GetACP
GetStringTypeExW
LocalFree
CloseHandle
SizeofResource
GetCurrentProcessId
VirtualProtect
SetEnvironmentVariableW
ReadProcessMemory
QueryPerformanceFrequency
SetProcessWorkingSetSize
VirtualFree
GetFullPathNameW
ExitProcess
HeapAlloc
GetCPInfoExW
WriteProcessMemory
RtlUnwind
GetCPInfo
GetStdHandle
GetModuleHandleW
FreeLibrary
HeapDestroy
ReadFile
GetLastError
GetModuleFileNameW
SetLastError
FindResourceW
CreateThread
CompareStringW
LoadLibraryA
ResetEvent
GetVersion
FreeResource
RaiseException
OpenProcess
FormatMessageW
SwitchToThread
GetExitCodeThread
GetCurrentThread
LoadLibraryExW
LockResource
GetCurrentThreadId
UnhandledExceptionFilter
VirtualQuery
VirtualQueryEx
Sleep
EnterCriticalSection
SetFilePointer
GetStringTypeExA
LoadResource
SuspendThread
GetTickCount
GetStartupInfoW
InitializeCriticalSection
GetThreadPriority
SetThreadPriority
GetCurrentProcess
AllocConsole
VirtualAlloc
GetSystemInfo
GetCommandLineW
LeaveCriticalSection
GetProcAddress
ResumeThread
GetVersionExW
VerifyVersionInfoW
HeapCreate
VerSetConditionMask
GetDiskFreeSpaceW
FindFirstFileW
GetUserDefaultUILanguage
lstrlenW
CompareStringA
SetEndOfFile
QueryPerformanceCounter
HeapFree
WideCharToMultiByte
FindClose
MultiByteToWideChar
LoadLibraryW
SetEvent
CreateFileW
GetLocaleInfoW
GetLocalTime
WaitForSingleObject
WriteFile
ExitThread
DeleteCriticalSection
TlsGetValue
GetDateFormatW
SetErrorMode
IsValidLocale
TlsSetValue
GetSystemDefaultUILanguage
EnumCalendarInfoW
LocalAlloc
CreateEventW
SetThreadLocale
GetThreadLocale
ole32
CoInitialize
CoUninitialize
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
user32
CharUpperBuffA
CharUpperBuffW
CharNextW
MsgWaitForMultipleObjects
CharLowerBuffA
CharLowerBuffW
LoadStringW
CharUpperW
PeekMessageW
GetSystemMetrics
MessageBoxW
oleaut32
SafeArrayPutElement
GetErrorInfo
VariantInit
VariantClear
SysFreeString
SafeArrayAccessData
SysReAllocStringLen
SafeArrayCreate
SafeArrayGetElement
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
VariantCopy
VariantChangeType
msvcrt
memcpy
netapi32
NetWkstaGetInfo
NetApiBufferFree
advapi32
RegQueryValueExA
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
RegOpenKeyExW
P0
P1
TMethodImplementationIntercept
Z1
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Name
.text
Size
757KB
Virtual Size
757KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.itext
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
27KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.bss
Size
Virtual Size
541KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.didata
Size
512B
Virtual Size
420B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.edata
Size
512B
Virtual Size
189B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
Virtual Size
28B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
93B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Combo Minecraft/Minecraft Checker/Read before using.txt
- SHA256 63c60f2a04a1f40d3784f7818a816d111e3a9522f526bcca891edc2bb5e774fc
- MD5 6daebb9555014ea4ca81161fdf5955d9
- SHA1 6eb61b194d6951eaede87452b3163aff7d44f6c6
- SHA512 6cd0912e950f1f41142647d8a690a9a6a9bc59b97d031f45f4153902d42d33abe2afbd7355841b7ff60ea4f8389afe9a79a186c1ff525a6fe7fb903f16dd03f6
- MD5 SHA1 SHA512
Combo Minecraft/Minecraft Checker/YouTube 2.lnk
- SHA256 b3bb48a747cc7078d4c4c5bd872a270b59f328ae90a85ef3d955b8a4892bff41
- MD5 deb42bbec322cd0b8319f788312e28c4
- SHA1 073d20ea0feabd59943fefff0b3a2c5ff320e1bc
- SHA512 c4a9bd358dd225459410bcbe75ded4f514b708ff3799b1b56da388718d178ef6e2966ba8970a0bda03a42d65dae27973709de360582478fb24532f9d8b800e5f
- MD5 SHA1 SHA512
Combo Minecraft/Minecraft Checker/YouTube.lnk
- SHA256 bde117478e44d3aa7d55122cf450f10b5af74cfb4ce82ae4fc6fb7dd414c2469
- MD5 c7056a1f92245eec9e5ca71f406c4811
- SHA1 dfd0cf087771943aa92e7e88114e993234425d8b
- SHA512 640987725389f98a39892bdb03dbb59f316227b6611c488665f2d166bd8434b34b86ad1d784c9b750e9d57b031ea1c1522be37822111683e2e8762213cfefa2c
- MD5 SHA1 SHA512
Combo Minecraft/Minecraft Checker/xNet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 6c7ec4cc31a2ce0b97703b7a42e3448e9b87d96dda12761ca24d8787ac27cff1
- MD5 158defd55a804aa8d4d67bfdf7a4af9c
- SHA1 9dd41914fa181cb5225e593373f7dca062d7af0b
- SHA512 e98062b3b035d7d87c3457621c5ffc0aefed490544739219c4f4cafc3e7de248f1cf91edb3564e49d406f9fcaf314838d33b2ddd7e3b1a1751e5819b9ab798d6
- SSDEEP 3072:0IALHSH7PhqKnUqnV+xnEdSCo5E/awN5lRd0YjJ0:07LyIqnV+xnEdEmf
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
112190
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
102KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
1008B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Combo Minecraft/SLAYER Leecher v0.5/._cache_SLAYER Leecher v0.5 By X-SLAYER.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 54ba0c1fb0e81fa1f796531ae506fd184dea10628ab9f35ab9066df86b43c3a6
- MD5 b6d2a0e9584d3f7ae696ac83fc94713e
- SHA1 46c8381de688107919d2658c996ee3d0a03fffae
- SHA512 53fa6d888a0dda49d4b62402f5f1086b52ae67e9d4e18a03eb5cb8ea0b107fc87dfec2f965dbde464c02f6bec48972860a1cdb78c9067e1d9d2e7adc4820c645
- SSDEEP 24576:XZ+IA3qv19gf0fMmwG800J2Gjfk22b4ZqqqqSqqqqqqLqq/qqAZl:J+IA3qvv60dZsk2
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1146890
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
mscoree
_CorExeMain
Name
qQw`,Z,
Size
681KB
Virtual Size
681KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.text
Size
229KB
Virtual Size
229KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
176KB
Virtual Size
176KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
dotnet
Combo Minecraft/SLAYER Leecher v0.5/SLAYER Leecher v0.5 By X-SLAYER.exe
- SHA256 3eba607f97a148578a200cde9631e1524c05ce6e25bf6ab6cb4aef818fd08037
- MD5 9541fbd3065b66523a64971c06985124
- SHA1 ca38cd7eb3b90b1a6acf9eb6a85f8aae2044a0d3
- SHA512 11a6405277022f80b011063259f9e2fd4d68daad145fc3166e8c7383091472178e62a06bd5f77aa1583345b1ed9cb511484e28f27c8ab53dd0e0e7c27e91427f
- SSDEEP 24576:ZnsJ39LyjbJkQFMhmC+6GD9dZ+IA3qv19gf0fMmwG800J2Gjfk22b4ZqqqqSqqqq:ZnsHyjtk2MYC5GDt+IA3qvv60dZsk2s
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
633728
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
PDB paths
Name
CODE
Size
615KB
Virtual Size
614KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
DATA
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
BSS
Size
Virtual Size
4KB
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
11KB
Virtual Size
10KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.tls
Size
Virtual Size
16B
Characteristics
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
512B
Virtual Size
57B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
42KB
Virtual Size
42KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
Combo Minecraft/SLAYER Leecher v0.5/SkinSoft.VisualStyler.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 365ffde7df914840eb21c96f34c39912a4b031e3814b8e902b67acee6dff65a1
- MD5 2d84a619d4bd339f860cb48af0c9b6c8
- SHA1 05e520126ee1100c98263bfbd5a6ff0ce6ace4f7
- SHA512 bd0c5e8b018ae393a5f2b92b4a10b5b674ca466074d18b4f86b12cbe9a6a520a95323146cb8e5226b1698f14efcc63addf0df421677b7f5ba3c8d94dbcb511d0
- SSDEEP 12288:XxIFyaWHyXq7VBnpJnqRAjcHFNdotFYsFjrXhmEBFa:XxIFyaWHyXq7VBnpJnqRAwHsJm
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
992418
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
961KB
Virtual Size
961KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dotnet
Combo Minecraft/SLAYER Leecher v0.5/xNet.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2ac175b4d44245ee8e7aee9cc36df86925ef903d8516f20a2c51d84e35f23da4
- MD5 3df8d87a482efad957d83819adb3020f
- SHA1 f5b710581355ac5d0de7a36446b93533232144db
- SHA512 da28c34a85a6530b1c558fa11b0e71e70710d719cd8ceaf81f954d1fe3927ec139bee6c5f3135425cc5220905240f1a31d831611c46d18f5d52600b607ea59a6
- SSDEEP 3072:NWl4rhAigbJ0c1qnV+xnEd44asVyrVfwN5lTCTh3n3F:NWvigbdqnV+xnEd4zsVyJb
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
125278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
c:\Users\Илья\Documents\Visual Studio 2013\Projects\BTC\UPD\LITB MITB — копия — копия — копия\WindowsFormsApplication13\bin\Debug\Работа с прокси\xNet-master\obj\Debug\xNet.pdb
mscoree
_CorDllMain
Name
.text
Size
114KB
Virtual Size
114KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
968B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ