C:\Users\zz\Desktop\silence v2 [reborn]\Build\silence.pdb
Static task
static1
Behavioral task
behavioral1
Sample
silence.exe
Resource
win11-20240802-en
General
-
Target
silence.exe
-
Size
1.2MB
-
MD5
d6945c0d4d6a0d187ff63a5908eb64b9
-
SHA1
3351974ed237d44cd0cfcd7a30ae977fcfe5f4b6
-
SHA256
1b03916c9c31db070c80fbd2393ad06ee35d209633b0325876664f92cbda35bb
-
SHA512
f6312f39e3718684339f1ab4ce8181a89791076c964503fadc36fa3c308791c9c9354c984537d969b9bc53cf6f2144cc8b88d1c42b86a8bf1dc410484a451662
-
SSDEEP
24576:3Phk+s5mnYkcm5O0XQBW0XZ1oMZKgjnmYhZLU:3PhkiYW5OEQJpAYnms4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource silence.exe
Files
-
silence.exe.exe windows:6 windows x64 arch:x64
Password: SILENCE-RE-CKZ4-HBOH-DL69
b50a5ae787c20fb2c15d6f6078c9fa29
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_43
D3DCompile
kernel32
GetCurrentProcess
GetStdHandle
VirtualAlloc
LoadLibraryExA
CreateFileW
CreateToolhelp32Snapshot
CreateFileA
Process32Next
CloseHandle
lstrcmpiA
GetCurrentProcessId
Sleep
GetConsoleWindow
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetModuleHandleW
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
VerSetConditionMask
VirtualFree
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFullPathNameW
SetFileInformationByHandle
GetTempPathW
AreFileApisANSI
GetLastError
GetFileInformationByHandleEx
SetConsoleTitleA
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
Process32First
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
QueryPerformanceCounter
MultiByteToWideChar
DeviceIoControl
InitializeSListHead
user32
GetWindowRect
DestroyWindow
GetSystemMetrics
SetWindowDisplayAffinity
GetMonitorInfoA
EnumDisplaySettingsA
MoveWindow
CreateWindowExA
TranslateMessage
SendInput
GetCursorPos
ShowCursor
FindWindowA
SetCursor
GetForegroundWindow
GetAsyncKeyState
ScreenToClient
LoadCursorA
GetKeyState
SetClipboardData
GetClipboardData
LoadIconA
PeekMessageA
UnregisterClassA
PostQuitMessage
RegisterClassExA
EmptyClipboard
CloseClipboard
OpenClipboard
UpdateWindow
ShowWindow
DefWindowProcW
ClientToScreen
DispatchMessageA
SetCapture
GetCapture
GetClientRect
MonitorFromWindow
SetProcessDPIAware
SetLayeredWindowAttributes
GetWindowLongA
SetWindowLongA
IsWindowUnicode
ReleaseCapture
SetCursorPos
TrackMouseEvent
gdi32
CreateSolidBrush
advapi32
RegSetValueExA
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegOpenKeyExA
OpenProcessToken
RegCreateKeyA
RegQueryValueExA
shell32
SHGetFolderPathW
msvcp140
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
_Thrd_id
_Thrd_join
?id@?$ctype@D@std@@2V0locale@2@A
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Winerror_map@std@@YAHH@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Thrd_detach
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?uncaught_exceptions@std@@YAHXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?good@ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
ntdll
RtlInitAnsiString
RtlAnsiStringToUnicodeString
NtQuerySystemInformation
dbghelp
ImageRvaToVa
ImageDirectoryEntryToData
ImageNtHeader
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
dwmapi
DwmExtendFrameIntoClientArea
sentinal
s_token
s_init
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception
__current_exception_context
__intrinsic_setjmp
_CxxThrowException
memset
memmove
memcpy
memcmp
strrchr
__C_specific_handler
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
longjmp
memchr
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
_callnewh
malloc
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
_errno
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
exit
perror
abort
_beginthreadex
_wassert
terminate
_initialize_onexit_table
system
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-stdio-l1-1-0
fflush
fclose
fgetc
fopen
__p__commode
fwrite
_set_fmode
__stdio_common_vsscanf
_wfopen
__stdio_common_vsprintf
fgetpos
__stdio_common_vfprintf
fseek
__acrt_iob_func
ftell
__stdio_common_vsprintf_s
_get_stream_buffer_pointers
fputc
_fseeki64
fread
fsetpos
ungetc
setvbuf
api-ms-win-crt-math-l1-1-0
sinf
sqrtf
sqrt
sin
fmodf
cosf
cos
ceilf
atan2f
roundf
atan
acosf
_dsign
pow
__setusermatherr
api-ms-win-crt-convert-l1-1-0
strtod
strtoull
strtoll
strtol
atof
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
remove
api-ms-win-crt-locale-l1-1-0
localeconv
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-utility-l1-1-0
qsort
rand
api-ms-win-crt-string-l1-1-0
strncmp
tolower
_stricmp
strncpy
strcmp
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 931KB - Virtual size: 930KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 275KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ