C:\Users\x\Documents\GitHub\Project-Apparatus\ProjectApparatus\obj\x64\Release\ProjectApparatus.pdb
Static task
static1
General
-
Target
Project Apparatus v1.2.0_[unknowncheats.me]_.rar
-
Size
651KB
-
MD5
f9fa247e7688f25cff0c3acb3d766e5b
-
SHA1
5a6bbe6b8424c2f7cc37d18801e38b055bfbe94f
-
SHA256
0f7359771092e93014a09fa3c642c2aec663b29e74496bf6fd119d8382689b9e
-
SHA512
f5922a5e7b52a065a70107db704392ecd3055bd64faba4bd73efb49b9b3749e87303ec38dfea1b70c1463864893c2e101cc89f473efc79917e1508fc24b43032
-
SSDEEP
12288:zIbL3DuV8zppJP+CoDKVF1Xg9ucz6XQnTcLwH08ssam+C8kgEM29XdxZ:uLY8z3JxceXBuLss1J8kLrX1
Malware Config
Signatures
-
Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/Project Apparatus v1.2.0_[unknowncheats.me]_/Project Apparatus v1.2.0_[unknowncheats.me]_/ProjectApparatus.dll unpack001/Project Apparatus v1.2.0_[unknowncheats.me]_/Project Apparatus v1.2.0_[unknowncheats.me]_/SharpMonoInjector.dll unpack001/Project Apparatus v1.2.0_[unknowncheats.me]_/Project Apparatus v1.2.0_[unknowncheats.me]_/smi.exe
Files
-
Project Apparatus v1.2.0_[unknowncheats.me]_.rar.rar
-
Project Apparatus v1.2.0_[unknowncheats.me]_/Project Apparatus v1.2.0_[unknowncheats.me]_/!inject.bat
-
Project Apparatus v1.2.0_[unknowncheats.me]_/Project Apparatus v1.2.0_[unknowncheats.me]_/DebugLog.txt
-
Project Apparatus v1.2.0_[unknowncheats.me]_/Project Apparatus v1.2.0_[unknowncheats.me]_/ProjectApparatus.dll.dll windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 952B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
Project Apparatus v1.2.0_[unknowncheats.me]_/Project Apparatus v1.2.0_[unknowncheats.me]_/SharpMonoInjector.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Users\James\Documents\Visual Studio 2017\Projects\SharpMonoInjector\SharpMonoInjector\obj\Release\SharpMonoInjector.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Project Apparatus v1.2.0_[unknowncheats.me]_/Project Apparatus v1.2.0_[unknowncheats.me]_/smi.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\James\Documents\Visual Studio 2017\Projects\SharpMonoInjector\SharpMonoInjector.Console\obj\Release\smi.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ