Bloxshade-main[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Bloxshade-main.zip
Size

13.2MB
MD5

87f02ee8aefc51357f55c05498135651
SHA1

8eb676b3d793964035d942e5891951d72e523132
SHA256

e465ee0dbe64aaa41e14af2f9717235172d236cbbacf59f755c8bdf65211a821
SHA512

fd16171bb7d19a9811f59effd92676dfd2bbc7da4ad4d26ee8527b95d3dd390e099f97ce2b7208f1a94fff00690094e9c5c184472282f2052633843c22f280c7
SSDEEP

196608:r8HR4TPIeaKBMPpx3YLD+aI6xFN456QobUxMAoam+0oqJXZQTRzTpnHd8gXqXKXx:r8xYXaCMBpW+BJh150oqfQdzF68rHjN

Score

1^/10

Malware Config

Signatures

Files

Bloxshade-main.zip
.zip
Bloxshade-main/LICENSE
Bloxshade-main/README.md
Bloxshade-main/bloxshade/bloxshade.sln
Bloxshade-main/bloxshade/build/intermediates/installer.Build.CppClean.log
Bloxshade-main/bloxshade/build/intermediates/installer.exe.recipe
Bloxshade-main/bloxshade/build/intermediates/installer.log
Bloxshade-main/bloxshade/build/start_intermediates/start.Build.CppClean.log
Bloxshade-main/bloxshade/build/start_intermediates/start.exe.recipe
Bloxshade-main/bloxshade/build/start_intermediates/start.log
Bloxshade-main/bloxshade/installer/installer.vcxproj
.xml
Bloxshade-main/bloxshade/installer/installer.vcxproj.filters
Bloxshade-main/bloxshade/installer/installer.vcxproj.user
Bloxshade-main/bloxshade/installer/src/curl/curl.h
Bloxshade-main/bloxshade/installer/src/curl/curlver.h
Bloxshade-main/bloxshade/installer/src/curl/easy.h
Bloxshade-main/bloxshade/installer/src/curl/libcurl_a.lib
Bloxshade-main/bloxshade/installer/src/curl/libcurl_a_debug.lib
Bloxshade-main/bloxshade/installer/src/curl/mprintf.h
Bloxshade-main/bloxshade/installer/src/curl/multi.h
Bloxshade-main/bloxshade/installer/src/curl/stdcheaders.h
Bloxshade-main/bloxshade/installer/src/curl/system.h
Bloxshade-main/bloxshade/installer/src/curl/typecheck-gcc.h
Bloxshade-main/bloxshade/installer/src/curl/urlapi.h
Bloxshade-main/bloxshade/installer/src/json.hpp
Bloxshade-main/bloxshade/installer/src/main.cpp
.js
Bloxshade-main/bloxshade/installer/src/miniz.c
Bloxshade-main/bloxshade/installer/src/miniz.h
Bloxshade-main/bloxshade/start/res/extravi-reshade.ico
Bloxshade-main/bloxshade/start/res/installer.exe
.exe windows:6 windows x64 arch:x64

0ce828b534f806a01e712fd857284491

Code Sign

47:9e:0b:ca:68:5e:6d:8a:42:fa:23:22:17:59:1a:3d
Certificate

Issuer

CN=Extravi,O=extravi.dev,1.2.840.113549.1.9.1=#0c1164616e746540657874726176692e646576

Not Before

02/06/2024, 04:45

Not After

02/06/2104, 04:55

Subject

CN=Extravi,O=extravi.dev,1.2.840.113549.1.9.1=#0c1164616e746540657874726176692e646576

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:60:85:04:4a:69:18:31:9d:f3:36:4f:d4:c5:7c:99:5c:eb:13:2b
Signer

Actual PE Digest

05:60:85:04:4a:69:18:31:9d:f3:36:4f:d4:c5:7c:99:5c:eb:13:2b

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\hecker\Desktop\Bloxshade-main\bloxshade\build\installer.pdb

Imports

advapi32

RegGetValueW
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
CryptEncrypt

kernel32

GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
VirtualProtect
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetProcessHeap
HeapQueryInformation
HeapReAlloc
HeapFree
FlushFileBuffers
WriteConsoleW
EnumSystemLocalesW
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
WriteFile
SetFilePointerEx
FreeLibraryAndExitThread
ExitThread
CreateThread
SystemTimeToFileTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
GetSystemInfo
HeapValidate
HeapSize
HeapAlloc
GetModuleFileNameW
GetModuleHandleExW
ExitProcess
LoadLibraryExW
TlsFree
TlsSetValue
SetStdHandle
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetEndOfFile
MultiByteToWideChar
WinExec
FreeLibrary
CreateProcessW
LocalFree
GetProcAddress
LoadLibraryW
CloseHandle
WaitForSingleObject
GetTempPathW
GetCommandLineW
WideCharToMultiByte
OutputDebugStringW
GetLastError
SetLastError
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
VerSetConditionMask
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
VerifyVersionInfoA
Sleep
QueryPerformanceCounter
GetTickCount
WaitForSingleObjectEx
ExpandEnvironmentStringsA
GetStdHandle
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
CreateFileA
GetFileSizeEx
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetFileInformationByHandle
SetFileTime
AreFileApisANSI
DeviceIoControl
GetModuleHandleW
CopyFileW
MoveFileExW
GetFileInformationByHandleEx
CreateSymbolicLinkW
GetLocaleInfoEx
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
CompareStringEx
GetCPInfo
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
RtlUnwind

user32

MessageBoxW

comdlg32

GetOpenFileNameW

shell32

ShellExecuteW
CommandLineToArgvW

normaliz

IdnToAscii

ws2_32

htonl
select
__WSAFDIsSet
WSACleanup
WSAStartup
WSAIoctl
WSASetLastError
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
bind
recv
socket
WSAGetLastError
send
closesocket
listen
getaddrinfo
freeaddrinfo
recvfrom
sendto
ioctlsocket
gethostname
ntohl
accept

wldap32

ord22
ord41
ord50
ord45
ord26
ord211
ord46
ord217
ord143
ord30
ord32
ord27
ord33
ord79
ord35
ord200
ord301
ord60

crypt32

CertCreateCertificateChainEngine
CryptQueryObject
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertGetNameStringA
CertAddCertificateContextToStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore
CertOpenStore

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 285KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.fptable
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bloxshade-main/bloxshade/start/res/setup.exe
.exe windows:6 windows x64 arch:x64

7a6361d879c5048c350aa35ae14a21b8

Code Sign

47:9e:0b:ca:68:5e:6d:8a:42:fa:23:22:17:59:1a:3d
Certificate

Issuer

CN=Extravi,O=extravi.dev,1.2.840.113549.1.9.1=#0c1164616e746540657874726176692e646576

Not Before

02/06/2024, 04:45

Not After

02/06/2104, 04:55

Subject

CN=Extravi,O=extravi.dev,1.2.840.113549.1.9.1=#0c1164616e746540657874726176692e646576

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

9c:9e:46:ec:d4:eb:75:02:cf:fa:1e:7e:c3:3c:6f:a8:ff:f5:30:be
Signer

Actual PE Digest

9c:9e:46:ec:d4:eb:75:02:cf:fa:1e:7e:c3:3c:6f:a8:ff:f5:30:be

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

app.pdb

Imports

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressSingle
WakeByAddressAll

user32

GetKeyboardLayout
VkKeyScanW
MapVirtualKeyExW
GetKeyState
GetAsyncKeyState
GetKeyboardState
GetRawInputData
GetForegroundWindow
CreateWindowExW
IsWindow
GetSystemMetrics
SystemParametersInfoA
PostQuitMessage
CreateAcceleratorTableW
AppendMenuW
CreateMenu
SetMenuItemInfoW
CreateIcon
SendInput
SetForegroundWindow
ClientToScreen
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
DestroyAcceleratorTable
RegisterTouchWindow
ReleaseCapture
GetCursorPos
DestroyWindow
DestroyIcon
DispatchMessageW
MapVirtualKeyW
GetMessageW
TranslateMessage
IsProcessDPIAware
GetClientRect
GetDC
InvalidateRgn
GetAncestor
GetMessageA
PostMessageW
TranslateAcceleratorW
PeekMessageW
PostThreadMessageW
DefWindowProcW
FlashWindowEx
ChangeDisplaySettingsExW
AdjustWindowRectEx
GetWindowRect
MonitorFromPoint
EnumDisplayMonitors
GetWindowLongPtrW
SetWindowDisplayAffinity
GetMenu
ShowCursor
ClipCursor
GetClipCursor
SetWindowLongW
SendMessageW
GetSystemMenu
ShowWindow
CheckMenuItem
EnableMenuItem
SetCapture
SetWindowLongPtrW
MsgWaitForMultipleObjectsEx
RegisterRawInputDevices
RegisterClassExW
RegisterWindowMessageA
IsIconic
DispatchMessageA
EnumChildWindows
SetWindowPos
SetMenu
GetActiveWindow
SetCursorPos
GetMonitorInfoW
MonitorFromWindow
ToUnicodeEx
CloseTouchInputHandle
ScreenToClient
GetTouchInputInfo
TrackMouseEvent
MonitorFromRect
GetWindowLongW
IsWindowVisible
GetUpdateRect
ValidateRect
SetCursor
LoadCursorW
GetWindowPlacement
SetWindowPlacement
RedrawWindow

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
GetModuleHandleW
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetSystemTimeAsFileTime
LoadLibraryW
EncodePointer
InitializeSListHead
SleepConditionVariableSRW
lstrlenW
WakeAllConditionVariable
AcquireSRWLockExclusive
GetCurrentThreadId
CreateMutexA
WaitForSingleObjectEx
GetTempPathW
GetFullPathNameW
GetCurrentThread
CreateThread
ReleaseSRWLockExclusive
CloseHandle
GetProcAddress
WriteConsoleW
LCIDToLocaleName
UpdateProcThreadAttribute
LoadLibraryA
InitializeProcThreadAttributeList
CreateProcessW
GetWindowsDirectoryW
GetSystemDirectoryW
ReadFileEx
CreateNamedPipeW
ExitProcess
CopyFileExW
GetFinalPathNameByHandleW
RemoveDirectoryW
GetFileAttributesW
GetModuleFileNameW
GetLastError
OutputDebugStringA
OutputDebugStringW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
TlsAlloc
TlsGetValue
TlsSetValue
FreeLibrary
GetEnvironmentVariableW
GetSystemInfo
MoveFileExW
DeleteFileW
FindFirstFileW
CreateDirectoryW
GetProcessHeap
HeapFree
GetFileInformationByHandleEx
HeapAlloc
CreateFileW
FormatMessageW
WaitForSingleObject
MultiByteToWideChar
GetUserDefaultUILanguage
Sleep
GetModuleHandleA
GetCurrentProcess
DuplicateHandle
CreatePipe
GetFileInformationByHandle
GetConsoleMode
FindClose
FindNextFileW
FreeEnvironmentStringsW
DeleteProcThreadAttributeList
CompareStringOrdinal
AddVectoredExceptionHandler
SetThreadStackGuarantee
SwitchToThread
CreateWaitableTimerExW
SetWaitableTimer
QueryPerformanceCounter
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
SetLastError
GetCurrentDirectoryW
GetEnvironmentStringsW
SetEnvironmentVariableW
ReleaseMutex
GetCommandLineW
SetFileInformationByHandle
HeapReAlloc
QueryPerformanceFrequency
GetProcessId
TerminateProcess
GetExitCodeProcess
SleepEx
WriteFileEx
GetCurrentProcessId
GetStdHandle
TlsFree

gdi32

CreateRectRgn
GetDeviceCaps
DeleteObject

dwmapi

DwmEnableBlurBehindWindow

ole32

CreateStreamOnHGlobal
CoTaskMemFree
CoInitializeEx
RevokeDragDrop
CoUninitialize
RegisterDragDrop
OleInitialize
CoCreateInstance
CoTaskMemAlloc

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness

comctl32

DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass

shell32

ShellExecuteW
DragQueryFileW
DragFinish
SHGetKnownFolderPath
SHAppBarMessage

uxtheme

SetWindowTheme

advapi32

SystemFunction036
EventRegister
EventSetInformation
EventWriteTransfer
RegGetValueW
EventUnregister
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

oleaut32

GetErrorInfo
SysFreeString
SysStringLen
SetErrorInfo

bcrypt

BCryptGenRandom

ntdll

NtReadFile
NtWriteFile
RtlNtStatusToDosError
NtCreateFile

api-ms-win-crt-math-l1-1-0

trunc
floor
__setusermatherr
round
pow

api-ms-win-crt-string-l1-1-0

_wcsicmp
wcslen
strcpy_s
wcsncmp

api-ms-win-crt-convert-l1-1-0

_ultow_s
wcstol

api-ms-win-crt-runtime-l1-1-0

exit
_exit
_initterm
_get_initial_narrow_environment
_initialize_onexit_table
_register_onexit_function
_initialize_narrow_environment
__p___argc
__p___argv
_cexit
_initterm_e
_crt_atexit
_configure_narrow_argv
terminate
_seh_filter_exe
_c_exit
abort
_set_app_type
_register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
calloc
malloc
free

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 205KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Bloxshade-main/bloxshade/start/resource.h
Bloxshade-main/bloxshade/start/src/main.cpp
Bloxshade-main/bloxshade/start/start.aps
Bloxshade-main/bloxshade/start/start.rc
Bloxshade-main/bloxshade/start/start.vcxproj
.xml
Bloxshade-main/bloxshade/start/start.vcxproj.filters
Bloxshade-main/bloxshade/start/start.vcxproj.user
Bloxshade-main/installer/bloxshade/README.md
Bloxshade-main/installer/bloxshade/dist/assets/extravi-reshade-Dg1APPYY.bmp
Bloxshade-main/installer/bloxshade/dist/assets/index-BEUZOzOK.js
.js
Bloxshade-main/installer/bloxshade/dist/assets/index-BFVUHZ5g.js
.js
Bloxshade-main/installer/bloxshade/dist/assets/index-BIq7dLcv.css
Bloxshade-main/installer/bloxshade/dist/assets/index-BJe5nD8y.css
Bloxshade-main/installer/bloxshade/dist/assets/index-CsdtlvBO.js
.js
Bloxshade-main/installer/bloxshade/dist/assets/index-DVAdU4LS.css
Bloxshade-main/installer/bloxshade/dist/index.html
.html
Bloxshade-main/installer/bloxshade/dist/vite.svg
Bloxshade-main/installer/bloxshade/index.html
.html
Bloxshade-main/installer/bloxshade/package-lock.json
Bloxshade-main/installer/bloxshade/package.json
Bloxshade-main/installer/bloxshade/public/vite.svg
Bloxshade-main/installer/bloxshade/src-tauri/Cargo.lock
Bloxshade-main/installer/bloxshade/src-tauri/Cargo.toml
Bloxshade-main/installer/bloxshade/src-tauri/build.rs
Bloxshade-main/installer/bloxshade/src-tauri/icons/128x128.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/[email protected]
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/32x32.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/Square107x107Logo.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/Square142x142Logo.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/Square150x150Logo.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/Square284x284Logo.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/Square30x30Logo.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/Square310x310Logo.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/Square44x44Logo.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/Square71x71Logo.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/Square89x89Logo.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/StoreLogo.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/icons/extravi-reshade.ico
Bloxshade-main/installer/bloxshade/src-tauri/icons/icon.icns
Bloxshade-main/installer/bloxshade/src-tauri/icons/icon.ico
Bloxshade-main/installer/bloxshade/src-tauri/icons/icon.png
.png
Bloxshade-main/installer/bloxshade/src-tauri/src/main.rs
.js
Bloxshade-main/installer/bloxshade/src-tauri/tauri.conf.json
Bloxshade-main/installer/bloxshade/src/App.tsx
.js
Bloxshade-main/installer/bloxshade/src/assets/react.svg
Bloxshade-main/installer/bloxshade/src/extravi-reshade.bmp
Bloxshade-main/installer/bloxshade/src/extravi-reshade.png
.png
Bloxshade-main/installer/bloxshade/src/index.css
Bloxshade-main/installer/bloxshade/src/main.tsx
Bloxshade-main/installer/bloxshade/src/script.js
.js
Bloxshade-main/installer/bloxshade/src/vite-env.d.ts
Bloxshade-main/installer/bloxshade/tsconfig.json
Bloxshade-main/installer/bloxshade/tsconfig.node.json
Bloxshade-main/installer/bloxshade/vite.config.ts
Bloxshade-main/screenshots/Screenshot 2024-05-12 193209.png
.png
Bloxshade-main/screenshots/Screenshot 2024-05-12 193237.png
.png
Bloxshade-main/screenshots/Screenshot 2024-05-12 193325.png
.png
Bloxshade-main/screenshots/Screenshot 2024-05-12 193442.png
.png

Sharing

General

Malware Config

Signatures

Files

0ce828b534f806a01e712fd857284491

Code Sign

47:9e:0b:ca:68:5e:6d:8a:42:fa:23:22:17:59:1a:3dCertificate

Extended Key Usages

Key Usages

05:60:85:04:4a:69:18:31:9d:f3:36:4f:d4:c5:7c:99:5c:eb:13:2bSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

user32

comdlg32

shell32

normaliz

ws2_32

wldap32

crypt32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 285KB - Virtual size: 285KB

.data Size: 9KB - Virtual size: 19KB

.pdata Size: 55KB - Virtual size: 55KB

.fptable Size: 512B - Virtual size: 256B

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 5KB - Virtual size: 5KB

7a6361d879c5048c350aa35ae14a21b8

Code Sign

47:9e:0b:ca:68:5e:6d:8a:42:fa:23:22:17:59:1a:3dCertificate

Extended Key Usages

Key Usages

9c:9e:46:ec:d4:eb:75:02:cf:fa:1e:7e:c3:3c:6f:a8:ff:f5:30:beSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

bcryptprimitives

api-ms-win-core-synch-l1-2-0

user32

kernel32

gdi32

dwmapi

ole32

api-ms-win-shcore-scaling-l1-1-1

comctl32

shell32

uxtheme

advapi32

oleaut32

bcrypt

ntdll

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rdata Size: 2.5MB - Virtual size: 2.5MB

.data Size: 1KB - Virtual size: 13KB

.pdata Size: 181KB - Virtual size: 181KB

.rsrc Size: 205KB - Virtual size: 205KB

.reloc Size: 37KB - Virtual size: 36KB

47:9e:0b:ca:68:5e:6d:8a:42:fa:23:22:17:59:1a:3d
Certificate

05:60:85:04:4a:69:18:31:9d:f3:36:4f:d4:c5:7c:99:5c:eb:13:2b
Signer

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 285KB - Virtual size: 285KB

.data
Size: 9KB - Virtual size: 19KB

.pdata
Size: 55KB - Virtual size: 55KB

.fptable
Size: 512B - Virtual size: 256B

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 5KB - Virtual size: 5KB

47:9e:0b:ca:68:5e:6d:8a:42:fa:23:22:17:59:1a:3d
Certificate

9c:9e:46:ec:d4:eb:75:02:cf:fa:1e:7e:c3:3c:6f:a8:ff:f5:30:be
Signer

.text
Size: 3.7MB - Virtual size: 3.7MB

.rdata
Size: 2.5MB - Virtual size: 2.5MB

.data
Size: 1KB - Virtual size: 13KB

.pdata
Size: 181KB - Virtual size: 181KB

.rsrc
Size: 205KB - Virtual size: 205KB

.reloc
Size: 37KB - Virtual size: 36KB