tiny-glade[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

tiny-glade.exe
Size

45.8MB
MD5

2937ddd1ae487f1e4bd94c12d06f502a
SHA1

9c13eb62629f8d73278ec850ef9946c5ad8234d3
SHA256

76c998d48a2404b105b431d6d881290969e786e993dd7ae824b6bedab95fd708
SHA512

6b6d137a65abd8ed23bd7913e8d68ccd26567a59b87d5b6d6e8d5aa90c5851c548643b901a0d8a16bad2d4cdc18300c17c4b3601c958adeef887cae8cdc6f33c
SSDEEP

393216:CzVlOPcsoG3eZgeEztygxmWb5RTrgrqIPrgFniraFnrh/UrBr2YlyrkDnNrirYrF:CzHGGStyghbhuq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
tiny-glade.exe

Files

tiny-glade.exe
.exe windows:6 windows x64 arch:x64

7fbdf1e78595ce6430bff91efbf20058

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

tiny_glade.pdb

Imports

bcryptprimitives

ProcessPrng

kernel32

AddVectoredExceptionHandler
CloseHandle
CompareStringOrdinal
CopyFileExW
CreateDirectoryW
CreateFileMappingW
CreateFileW
CreateIoCompletionPort
CreateMutexA
CreateNamedPipeW
CreateProcessW
CreateThread
CreateWaitableTimerExW
DeleteCriticalSection
DeleteFileW
DeleteProcThreadAttributeList
DuplicateHandle
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileW
FindNextFileW
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineW
GetComputerNameExW
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetProcessId
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemTimePreciseAsFileTime
GetTempPathW
GetUserPreferredUILanguages
GetWindowsDirectoryW
GlobalAlloc
GlobalFree
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InitializeProcThreadAttributeList
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LockFileEx
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OpenProcess
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFileEx
RegisterWaitForSingleObject
ReleaseMutex
RemoveVectoredExceptionHandler
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleMode
SetConsoleTextAttribute
SetEnvironmentVariableW
SetFileAttributesW
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointerEx
SetHandleInformation
SetLastError
SetThreadErrorMode
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
UnregisterWait
UpdateProcThreadAttribute
VirtualProtect
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
WriteConsoleW
WriteFileEx
lstrlenW

user32

AdjustWindowRectEx
ChangeDisplaySettingsExW
ClientToScreen
ClipCursor
CloseClipboard
CloseTouchInputHandle
CreateIcon
CreateWindowExW
DefWindowProcW
DestroyIcon
DestroyWindow
DispatchMessageW
EmptyClipboard
EnableMenuItem
EnumDisplayMonitors
EnumDisplaySettingsExW
FlashWindowEx
GetActiveWindow
GetAsyncKeyState
GetClientRect
GetClipCursor
GetClipboardData
GetCursorPos
GetDC
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMessageW
GetMonitorInfoW
GetRawInputData
GetSystemMenu
GetSystemMetrics
GetTouchInputInfo
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
InvalidateRgn
IsClipboardFormatAvailable
IsIconic
IsProcessDPIAware
KillTimer
LoadCursorW
MapVirtualKeyExW
MapVirtualKeyW
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
OpenClipboard
PeekMessageW
PostMessageW
RedrawWindow
RegisterClassExW
RegisterClipboardFormatW
RegisterRawInputDevices
RegisterTouchWindow
RegisterWindowMessageA
ReleaseCapture
ScreenToClient
SendInput
SendMessageW
SetCapture
SetClipboardData
SetCursor
SetCursorPos
SetForegroundWindow
SetTimer
SetWindowDisplayAffinity
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
ShowCursor
ShowWindow
SystemParametersInfoA
ToUnicodeEx
TrackMouseEvent
TranslateMessage
ValidateRect

gdi32

BitBlt
CreateCompatibleDC
CreateDIBSection
CreateICA
CreateRectRgn
DeleteDC
DeleteObject
GetDeviceCaps
GetICMProfileA
SelectObject

ws2_32

WSACleanup
WSADuplicateSocketW
WSAGetLastError
WSAIoctl
WSARecv
WSASend
WSASocketW
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getpeername
getsockname
getsockopt
ioctlsocket
listen
recv
send
setsockopt
shutdown
socket

dwmapi

DwmEnableBlurBehindWindow

ole32

CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop

winmm

timeBeginPeriod
timeEndPeriod
timeGetDevCaps

steam_api64

SteamAPI_GetHSteamPipe
SteamAPI_ISteamApps_GetCurrentGameLanguage
SteamAPI_ISteamFriends_ActivateGameOverlayToWebPage
SteamAPI_ISteamInput_ActivateActionSet
SteamAPI_ISteamInput_GetActionSetHandle
SteamAPI_ISteamInput_GetAnalogActionData
SteamAPI_ISteamInput_GetAnalogActionHandle
SteamAPI_ISteamInput_GetConnectedControllers
SteamAPI_ISteamInput_GetDigitalActionData
SteamAPI_ISteamInput_GetDigitalActionHandle
SteamAPI_ISteamInput_Init
SteamAPI_ISteamInput_RunFrame
SteamAPI_ISteamNetworkingSockets_CloseConnection
SteamAPI_ISteamNetworkingSockets_CloseListenSocket
SteamAPI_ISteamScreenshots_AddScreenshotToLibrary
SteamAPI_ISteamScreenshots_HookScreenshots
SteamAPI_ISteamUser_GetSteamID
SteamAPI_ISteamUtils_IsSteamRunningOnSteamDeck
SteamAPI_ManualDispatch_FreeLastCallback
SteamAPI_ManualDispatch_GetAPICallResult
SteamAPI_ManualDispatch_GetNextCallback
SteamAPI_ManualDispatch_Init
SteamAPI_ManualDispatch_RunFrame
SteamAPI_Shutdown
SteamAPI_SteamApps_v008
SteamAPI_SteamFriends_v017
SteamAPI_SteamInput_v006
SteamAPI_SteamScreenshots_v003
SteamAPI_SteamUser_v023
SteamAPI_SteamUtils_v010
SteamInternal_SteamAPI_Init

uxtheme

SetWindowTheme

shell32

DragFinish
DragQueryFileW
SHCreateItemFromParsingName
SHGetKnownFolderPath

imm32

ImmAssociateContextEx
ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionWindow

ntdll

NtCancelIoFileEx
NtCreateFile
NtDeviceIoControlFile
NtReadFile
NtWriteFile
RtlNtStatusToDosError

bcrypt

BCryptGenRandom

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressAll
WakeByAddressSingle

advapi32

ImpersonateAnonymousToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RevertToSelf
SystemFunction036

dbghelp

MiniDumpWriteDump

fmodstudio

FMOD_Studio_Bank_LoadSampleData
FMOD_Studio_EventDescription_CreateInstance
FMOD_Studio_EventInstance_GetParameterByName
FMOD_Studio_EventInstance_GetPaused
FMOD_Studio_EventInstance_GetPlaybackState
FMOD_Studio_EventInstance_Release
FMOD_Studio_EventInstance_Set3DAttributes
FMOD_Studio_EventInstance_SetParameterByName
FMOD_Studio_EventInstance_SetPaused
FMOD_Studio_EventInstance_SetVolume
FMOD_Studio_EventInstance_Start
FMOD_Studio_EventInstance_Stop
FMOD_Studio_System_Create
FMOD_Studio_System_GetCoreSystem
FMOD_Studio_System_GetEvent
FMOD_Studio_System_GetVCA
FMOD_Studio_System_Initialize
FMOD_Studio_System_LoadBankFile
FMOD_Studio_System_SetListenerAttributes
FMOD_Studio_System_SetParameterByName
FMOD_Studio_System_Update
FMOD_Studio_VCA_SetVolume

fmod

FMOD_System_GetDSPBufferSize
FMOD_System_GetSoftwareFormat
FMOD_System_SetSoftwareFormat

shlwapi

AssocQueryStringW

oleaut32

GetErrorInfo
SysFreeString
SysStringLen

dxgi

CreateDXGIFactory

vcruntime140

_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
_set_purecall_handler
memcmp
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__p__commode
__stdio_common_vsprintf
_set_fmode
fclose
fopen
fread
fseek
ftell
fwrite
puts

api-ms-win-crt-math-l1-1-0

__setusermatherr
_dclass
_fdclass
_hypotf
acos
acosf
asin
asinf
atan2
atan2f
atanf
cbrtf
ceil
ceilf
cos
cosf
exp
exp2f
expf
floor
floorf
fmaf
fmod
fmodf
log
log10
log1pf
log2f
pow
powf
round
roundf
sin
sinf
sqrt
tan
tanf
trunc
truncf

api-ms-win-crt-time-l1-1-0

_gmtime64
_time64

api-ms-win-crt-runtime-l1-1-0

__p___argc
__p___argv
_c_exit
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_get_initial_narrow_environment
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_invoke_watson
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_app_type
_set_invalid_parameter_handler
_wassert
abort
exit
signal
strerror
terminate

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free
malloc
realloc

api-ms-win-crt-filesystem-l1-1-0

remove

api-ms-win-crt-string-l1-1-0

strcpy
strlen
strncpy

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 33.3MB - Virtual size: 33.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11.2MB - Virtual size: 11.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 945B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.voltbl
Size: 512B - Virtual size: 14B

.reloc
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7fbdf1e78595ce6430bff91efbf20058

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

bcryptprimitives

kernel32

user32

gdi32

ws2_32

dwmapi

ole32

winmm

steam_api64

uxtheme

shell32

imm32

ntdll

bcrypt

api-ms-win-core-synch-l1-2-0

advapi32

dbghelp

fmodstudio

fmod

shlwapi

oleaut32

dxgi

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 33.3MB - Virtual size: 33.3MB

.rdata Size: 11.2MB - Virtual size: 11.2MB

.data Size: 39KB - Virtual size: 63KB

.pdata Size: 1.1MB - Virtual size: 1.1MB

.eh_fram Size: 512B - Virtual size: 88B

.tls Size: 1024B - Virtual size: 945B

.voltbl Size: 512B - Virtual size: 14B

.reloc Size: 212KB - Virtual size: 212KB

.text
Size: 33.3MB - Virtual size: 33.3MB

.rdata
Size: 11.2MB - Virtual size: 11.2MB

.data
Size: 39KB - Virtual size: 63KB

.pdata
Size: 1.1MB - Virtual size: 1.1MB

.eh_fram
Size: 512B - Virtual size: 88B

.tls
Size: 1024B - Virtual size: 945B

.voltbl
Size: 512B - Virtual size: 14B

.reloc
Size: 212KB - Virtual size: 212KB