bostware+1v1[.]lol+v2[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

bostware+1v1.lol+v2.rar
Size

363KB
MD5

93bd6e8e86f7eadd475751f7a9094e3d
SHA1

0cbcb945b53e7cfbf46b4e7fc77af30d6396cd76
SHA256

3da735d0b5db2a754b5c01bfe6c98f71d6ccd585535f3a316755e7b906b72deb
SHA512

e7900b0d0603bf52ec0ebbf896c3483105c75cd4f5af33745f7a814d27da823a825dc2b13d12d45df271c01fe3b3209190bd3aecb3630c84ec3bb7aeaea2bf13
SSDEEP

6144:w/FFCzuDqHPhoSzDKEpl/+xLEr7b3KMR+BluIuU9KVdGf+B71qXTNUro:KFFiusZouKMWxLWwBluQ9KV5BhqDNgo

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/bostware 1v1.lol v2/andreu 1v1lol inj.exe
unpack001/bostware 1v1.lol v2/boostware.dll

Files

bostware+1v1.lol+v2.rar
.rar

Password: 123
bostware 1v1.lol v2/andreu 1v1lol inj.exe
.exe windows:6 windows x64 arch:x64

Password: 123

43918d2040833b7524c5eb2b2b70707d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\pauto\Downloads\Payson-Injector-main\Payson-Injector-main\x64\Release\andreu 1v1lol inj.pdb

Imports

kernel32

DeviceIoControl
CreateFileW
CloseHandle
ReadFile
VirtualFree
GetCurrentProcess
VirtualAlloc
GetModuleHandleA
CreateToolhelp32Snapshot
Process32NextW
LoadLibraryA
Process32FirstW
K32GetModuleInformation
GetFileSize
SetConsoleTitleA
Sleep
GetCurrentProcessId
GetModuleHandleW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
QueryPerformanceCounter

user32

GetAsyncKeyState
GetWindowThreadProcessId
UnhookWinEvent
EnumWindows
SetWinEventHook

msvcp140

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?good@ios_base@std@@QEBA_NXZ
??7ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?uncaught_exception@std@@YA_NXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
__current_exception_context
memcpy
__std_terminate
__std_exception_destroy
__std_exception_copy
__C_specific_handler
_CxxThrowException
__current_exception
memmove

api-ms-win-crt-stdio-l1-1-0

ungetc
fwrite
__p__commode
fgetpos
_set_fmode
fgetc
_get_stream_buffer_pointers
fclose
_fseeki64
fflush
fread
fputc
__stdio_common_vfprintf
__acrt_iob_func
fsetpos
setvbuf

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
_callnewh
free

api-ms-win-crt-filesystem-l1-1-0

remove
_unlock_file
_lock_file

api-ms-win-crt-runtime-l1-1-0

exit
_exit
system
_initterm_e
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
__p___argc
_register_onexit_function
_crt_atexit
_configure_narrow_argv
terminate
_set_app_type
_seh_filter_exe
_invalid_parameter_noinfo_noreturn
_initialize_onexit_table

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 538KB - Virtual size: 537KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
bostware 1v1.lol v2/boostware.dll
.dll windows:6 windows x64 arch:x64

Password: 123

df03ff9e3a77bef2367bedbee11b038d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\pauto\Downloads\1v1.lol cheat\1v1.lol cheat\Il2CPP-Base-main\x64\Release\IL2CPP.pdb

Imports

kernel32

GlobalFree
GlobalLock
GlobalUnlock
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
HeapReAlloc
CloseHandle
HeapAlloc
HeapDestroy
GetThreadContext
GetCurrentProcessId
FlushInstructionCache
SetThreadContext
OpenThread
SetConsoleTitleA
GetTickCount64
AttachConsole
DisableThreadLibraryCalls
CreateThread
AllocConsole
GetProcAddress
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
Sleep
GetModuleHandleA
GlobalAlloc
VirtualProtect

user32

GetAsyncKeyState
CallWindowProcA
mouse_event
SetWindowLongPtrA
SendInput
DestroyWindow
DefWindowProcA
ReleaseCapture
CreateWindowExA
UnregisterClassA
RegisterClassExA
GetKeyState
LoadCursorA
ScreenToClient
SetCursorPos
GetCursorPos
GetClientRect
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
SetCursor
SetCapture
GetForegroundWindow
IsChild
ClientToScreen
GetCapture

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

d3dcompiler_43

D3DCompile

xinput1_3

ord2
ord4

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
__std_exception_destroy
__std_exception_copy
__std_terminate
_CxxThrowException
strrchr
__current_exception_context
__current_exception
__C_specific_handler
strstr
memchr
memmove
memcpy
memcmp
__std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_cexit
terminate
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_wassert
exit
system
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
freopen_s
fseek
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
fflush
__stdio_common_vfprintf
fclose
ftell

api-ms-win-crt-string-l1-1-0

strcmp
strncpy

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc
free
calloc
_callnewh

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-math-l1-1-0

fmodf
atan2f
ceilf
cosf
floorf
powf
pow
sinf
sqrtf

Sections

.text
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: 123

Password: 123

43918d2040833b7524c5eb2b2b70707d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 538KB - Virtual size: 537KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 512B - Virtual size: 144B

Password: 123

df03ff9e3a77bef2367bedbee11b038d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

imm32

d3dcompiler_43

xinput1_3

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 276KB - Virtual size: 276KB

.rdata Size: 74KB - Virtual size: 74KB

.data Size: 156KB - Virtual size: 158KB

.pdata Size: 12KB - Virtual size: 12KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 248B

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 538KB - Virtual size: 537KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 512B - Virtual size: 144B

.text
Size: 276KB - Virtual size: 276KB

.rdata
Size: 74KB - Virtual size: 74KB

.data
Size: 156KB - Virtual size: 158KB

.pdata
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 248B