C:\Users\luis\Desktop\@silence v2 [REWORK]\Build\silence v2 [REWORK].pdb
Static task
static1
Behavioral task
behavioral1
Sample
silence v2 [REWORK].exe
Resource
win10v2004-20240802-en
General
-
Target
silence v2 [REWORK].exe
-
Size
1.2MB
-
MD5
08235250b9b3606d15be15e5c5806ab2
-
SHA1
e615a18ae9489c2aeba7075c0122969efc1e5de9
-
SHA256
71adc6adf0b7e6ac238661ac69d5699e6a491a77453527f624d3e0db86c76c98
-
SHA512
3e8ad05080fec0ac4c3881f6c19b3d098db7ca581842bb8ea5d7e010aa0617d88b36d5bca4f7ed43b3b717411d4026e325dde974a5227dc9c48792a5e04332de
-
SSDEEP
24576:e0U9JX8/CIvL/j31PFcnhRzxyc4XFZ/pnnd2hELl:jU9JX8d/jlPunLwThndb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource silence v2 [REWORK].exe
Files
-
silence v2 [REWORK].exe.exe windows:6 windows x64 arch:x64
f5512db34707e1e87f9022d2123452c9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_43
D3DCompile
kernel32
GetCurrentProcess
GetStdHandle
VirtualAlloc
LoadLibraryExA
CreateFileW
CreateToolhelp32Snapshot
CreateFileA
Process32Next
CloseHandle
GetConsoleWindow
lstrcmpiA
GetCurrentProcessId
Sleep
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetModuleHandleW
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
VirtualFree
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesW
GetFileAttributesExW
GetFullPathNameW
SetFileInformationByHandle
GetTempPathW
AreFileApisANSI
GetLastError
GetFileInformationByHandleEx
SetConsoleTitleA
SetConsoleTextAttribute
GetConsoleScreenBufferInfo
Process32First
VerSetConditionMask
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
QueryPerformanceCounter
MultiByteToWideChar
DeviceIoControl
InitializeSListHead
user32
GetWindowRect
DestroyWindow
GetSystemMetrics
SetWindowDisplayAffinity
GetMonitorInfoA
EnumDisplaySettingsA
MoveWindow
CreateWindowExA
TranslateMessage
LoadIconA
DispatchMessageA
GetCursorPos
ShowCursor
FindWindowA
SendInput
GetForegroundWindow
GetAsyncKeyState
ScreenToClient
LoadCursorA
GetKeyState
SetClipboardData
GetClipboardData
PeekMessageA
UnregisterClassA
PostQuitMessage
RegisterClassExA
UpdateWindow
EmptyClipboard
CloseClipboard
OpenClipboard
SetWindowLongA
GetWindowLongA
DefWindowProcW
SetCapture
SetCursor
ClientToScreen
GetClientRect
GetCapture
SetProcessDPIAware
MonitorFromWindow
ShowWindow
SetLayeredWindowAttributes
IsWindowUnicode
ReleaseCapture
SetCursorPos
TrackMouseEvent
gdi32
CreateSolidBrush
advapi32
RegSetValueExA
LookupPrivilegeValueW
AdjustTokenPrivileges
RegCloseKey
RegOpenKeyA
RegDeleteKeyA
RegOpenKeyExA
OpenProcessToken
RegCreateKeyA
RegQueryValueExA
shell32
SHGetFolderPathW
msvcp140
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?_Winerror_map@std@@YAHH@Z
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ
_Thrd_id
_Thrd_join
?id@?$ctype@D@std@@2V0locale@2@A
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?_Random_device@std@@YAIXZ
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Thrd_detach
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?uncaught_exceptions@std@@YAHXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_function_call@std@@YAXXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?good@ios_base@std@@QEBA_NXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
??Bid@locale@std@@QEAA_KXZ
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
ntdll
RtlInitAnsiString
RtlAnsiStringToUnicodeString
NtQuerySystemInformation
dbghelp
ImageRvaToVa
ImageDirectoryEntryToData
ImageNtHeader
imm32
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
dwmapi
DwmExtendFrameIntoClientArea
sentinal
s_token
s_init
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcmp
__current_exception
__current_exception_context
__intrinsic_setjmp
_CxxThrowException
memmove
memcpy
memchr
strrchr
__C_specific_handler
strstr
__std_terminate
__std_exception_copy
__std_exception_destroy
longjmp
memset
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
_set_new_mode
free
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_configure_narrow_argv
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
_errno
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
exit
perror
_beginthreadex
abort
system
_invalid_parameter_noinfo_noreturn
terminate
_initialize_narrow_environment
_wassert
api-ms-win-crt-stdio-l1-1-0
fflush
fclose
fgetc
__p__commode
fopen
fwrite
_set_fmode
__stdio_common_vsscanf
fputc
__stdio_common_vsprintf
fgetpos
__stdio_common_vfprintf
fseek
__acrt_iob_func
ftell
__stdio_common_vsprintf_s
_get_stream_buffer_pointers
_wfopen
_fseeki64
fread
fsetpos
ungetc
setvbuf
api-ms-win-crt-math-l1-1-0
sin
pow
sinf
sqrtf
sqrt
fmodf
cosf
cos
ceilf
roundf
atan2f
atan
acosf
_dsign
__setusermatherr
api-ms-win-crt-convert-l1-1-0
strtod
strtoll
strtol
strtoull
atof
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-locale-l1-1-0
localeconv
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-utility-l1-1-0
qsort
rand
api-ms-win-crt-string-l1-1-0
strncpy
strncmp
_stricmp
strcmp
tolower
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 929KB - Virtual size: 928KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 274KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ