756607ef660b6a73560e19ab180ed3a031ab44637095c2675bbb412e31fdb9a1

Sharing

Copy URL

Twitter E-mail

General

Target

756607ef660b6a73560e19ab180ed3a031ab44637095c2675bbb412e31fdb9a1
Size

12KB
MD5

7356ad6fc8600dd5bff1df642419ebed
SHA1

7036265ef2621339545016ba054b34207efb403b
SHA256

756607ef660b6a73560e19ab180ed3a031ab44637095c2675bbb412e31fdb9a1
SHA512

cca0cb4bc4f84460174c99922b947c5338fec31bd340ce538d9d46b66c46bf9f3a502788588ba862746c932ec13e116108312f209e73f8eeff39b57e684bc95b
SSDEEP

192:rjBMLQF/0lSpEyvsq7yCqfHbyENkcqDcW:rNMLM39J78YDcW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
756607ef660b6a73560e19ab180ed3a031ab44637095c2675bbb412e31fdb9a1

Files

756607ef660b6a73560e19ab180ed3a031ab44637095c2675bbb412e31fdb9a1
.dll windows:6 windows x64 arch:x64

3cea3d0246714fd4598c1ae3e5f3bd81

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\assemblage\Builds\1756978243200485816egenszfuvy\GameEngine-v1.0-master\GameEngine-v1.0\assemblage_outdir_bin\GameEngine-v1.0.pdb

Imports

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
__C_specific_handler
__current_exception_context
__current_exception
memset

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
terminate
_cexit

api-ms-win-crt-heap-l1-1-0

free

kernel32

GetSystemTimeAsFileTime
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
RtlLookupFunctionEntry
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

Exports

Exports

??0Application@Engine@@QEAA@AEBV01@@Z
??0Application@Engine@@QEAA@XZ
??1Application@Engine@@UEAA@XZ
??4Application@Engine@@QEAAAEAV01@AEBV01@@Z
??_7Application@Engine@@6B@
?Run@Application@Engine@@QEAAXXZ

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3cea3d0246714fd4598c1ae3e5f3bd81

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 512B - Virtual size: 504B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 60B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 512B - Virtual size: 504B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 60B