OlympusSolutions[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

OlympusSolutions.exe
Size

1.7MB
MD5

c76a33f00028ed9d6ecd1a506bf0e722
SHA1

e817e7ca2b70582b8ae9cd3dc5ae052237e25a35
SHA256

916a95ed228fd3c82aa4c8b038031141292a992f2b227055d88a01257a43a7a0
SHA512

5fafba8914190216cdc39d68ec35cb335f90e7b5a8a1a2f398f146d9bbde1fb47f4f8f70f8e65091b075c2e084e208cf8873ef61f0be7d3b7769c90e6fc724ca
SSDEEP

24576:YNohEB0agM7th5YBK0xLjDb6rEZ/Jo60OegX7Ao6nQrCO82rYudrgZRMxMmABlNo:8ohEBJgiYBBjDiy0Erv6nDSsudkuXS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OlympusSolutions.exe

Files

OlympusSolutions.exe
.exe windows:6 windows x64 arch:x64

0beb35dabc4e1434d375ddbb17d88cb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\h7l\Desktop\loader for nigger\x64\Release\bobo.pdb

Imports

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

kernel32

GetProcAddress
FreeLibrary
QueryPerformanceCounter
LoadLibraryW
GetModuleHandleW
WaitForSingleObject
CloseHandle
CreateProcessW
GetConsoleWindow
TerminateProcess
GetCurrentProcess
CreateFileA
GetFileSizeEx
ReadFile
HeapAlloc
HeapFree
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateFileW
FindClose
FindFirstFileW
QueryPerformanceFrequency
IsDebuggerPresent
GetStartupInfoW
GetFileAttributesExW
GetCurrentProcessId
AreFileApisANSI
GetLastError
GetCurrentThreadId
GetSystemTimeAsFileTime
LoadLibraryA
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
InitializeSListHead
SleepConditionVariableSRW
IsProcessorFeaturePresent
RtlCaptureContext
RtlLookupFunctionEntry
GlobalAlloc
MultiByteToWideChar
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RtlVirtualUnwind

user32

PostQuitMessage
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
IsWindowUnicode
GetClientRect
SetCursor
SetCapture
LoadCursorW
MessageBoxW
MessageBoxA
GetWindowLongW
DefWindowProcW
DestroyWindow
CreateWindowExW
GetSystemMetrics
UnregisterClassW
GetForegroundWindow
DispatchMessageW
SetWindowLongA
PeekMessageW
SetLayeredWindowAttributes
TranslateMessage
RegisterClassExW
UpdateWindow
GetWindowRect
ShowWindow
MoveWindow
GetKeyState
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent

advapi32

GetUserNameW

msvcp140

?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow

dwmapi

DwmExtendFrameIntoClientArea

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy
__std_terminate
strstr
strrchr
longjmp
memcpy
_CxxThrowException
__intrinsic_setjmp
__C_specific_handler
__current_exception_context
__current_exception
memcmp
memchr
memset
__std_exception_destroy
memmove

api-ms-win-crt-stdio-l1-1-0

fflush
__acrt_iob_func
fseek
fwrite
_wfopen
__stdio_common_vsprintf
ftell
fclose
_set_fmode
fread
__stdio_common_vsscanf
__p__commode
__stdio_common_vfprintf

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-string-l1-1-0

strncpy
strcmp
strncmp

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
malloc
_callnewh

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
terminate
_register_onexit_function
_crt_atexit
_cexit
system
_seh_filter_exe
exit
_set_app_type
_get_narrow_winmain_command_line
_invalid_parameter_noinfo_noreturn
_register_thread_local_exe_atexit_callback
_c_exit
_initterm
_initialize_onexit_table
_exit
_initterm_e
abort

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func
_configthreadlocale

api-ms-win-crt-math-l1-1-0

__setusermatherr
powf
sinf
acosf
sqrtf
cosf
ceilf

Sections

.text
Size: 636KB - Virtual size: 635KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 424KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 534KB - Virtual size: 537KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0beb35dabc4e1434d375ddbb17d88cb0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d11

d3dcompiler_43

kernel32

user32

advapi32

msvcp140

imm32

dwmapi

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 636KB - Virtual size: 635KB

.rdata Size: 424KB - Virtual size: 424KB

.data Size: 534KB - Virtual size: 537KB

.pdata Size: 32KB - Virtual size: 31KB

.rsrc Size: 115KB - Virtual size: 114KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 636KB - Virtual size: 635KB

.rdata
Size: 424KB - Virtual size: 424KB

.data
Size: 534KB - Virtual size: 537KB

.pdata
Size: 32KB - Virtual size: 31KB

.rsrc
Size: 115KB - Virtual size: 114KB

.reloc
Size: 3KB - Virtual size: 3KB