EntryPointFunc
Static task
static1
General
-
Target
Twitch.rar
-
Size
448KB
-
MD5
f6f8274b2536842b9b7d7bf297d2a645
-
SHA1
b4427061b490aac250b7c339cd088bddf941f47e
-
SHA256
ebe5cf0da1a4d8f2cb600633050490ee169ba40a18a12fc7bdedf408332e307e
-
SHA512
49674fc212c84c571feeb70f5f73f8a6efef538a134014f98922c9295aaf04be55eebfe2151d27cdafdd040214a29914c139f72cf28d2d91afae9e16ac5a1ae0
-
SSDEEP
12288:38zCAGQl56jISlCOA3QAGXSGQhgrEtiWoihcCg/8:+GfzlKGA9XcN/8
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Twitch/Video Copilot Twitch/Twitch 32-bit/twitch.aex unpack001/Twitch/Video Copilot Twitch/Twitch 64-bit/twitch.aex
Files
-
Twitch.rar.rar
-
Twitch/Video Copilot Twitch/How to Install (READ).txt
-
Twitch/Video Copilot Twitch/Twitch 32-bit/twitch.aex.dll windows:5 windows x86 arch:x86
712da46af641bbc759f56406e23816c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
WaitForMultipleObjects
DeleteCriticalSection
CloseHandle
CreateThread
AllocConsole
SetConsoleScreenBufferSize
FreeConsole
SetConsoleTitleA
GetStdHandle
WriteConsoleA
GetModuleFileNameA
InterlockedIncrement
InterlockedDecrement
Sleep
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
ExitProcess
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
GetModuleHandleA
Exports
Exports
Sections
.text Size: 446KB - Virtual size: 446KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 250KB - Virtual size: 263KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Twitch/Video Copilot Twitch/Twitch 32-bit/twitch_ae.key
-
Twitch/Video Copilot Twitch/Twitch 64-bit/twitch.aex.dll windows:5 windows x64 arch:x64
a70ee4c7fee6bd6a6f546fa838a63542
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
advapi32
RegCreateKeyA
RegCloseKey
RegQueryValueExA
kernel32
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetSystemInfo
WaitForMultipleObjects
DeleteCriticalSection
CloseHandle
CreateThread
AllocConsole
SetConsoleScreenBufferSize
FreeConsole
SetConsoleTitleA
GetStdHandle
WriteConsoleA
GetModuleFileNameA
Sleep
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetSystemTimeAsFileTime
GetCurrentThreadId
FlsSetValue
GetCommandLineA
RaiseException
RtlPcToFileHeader
RtlUnwindEx
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
HeapAlloc
EncodePointer
DecodePointer
FlsGetValue
FlsFree
SetLastError
FlsAlloc
HeapSize
GetModuleHandleW
GetProcAddress
ExitProcess
HeapSetInformation
HeapCreate
HeapDestroy
WriteFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetHandleCount
GetFileType
GetStartupInfoA
ReadFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
HeapReAlloc
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileA
GetLocaleInfoW
SetEndOfFile
GetProcessHeap
Exports
Exports
EntryPointFunc
Sections
.text Size: 487KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 254KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Twitch/Video Copilot Twitch/Twitch 64-bit/twitch_ae.key
-
Twitch/Video Copilot Twitch/_DS_Store