Brave[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

Brave.exe
Size

873KB
MD5

004547a4852c55459624ce5e920f57d7
SHA1

f7f28bffa32e1e0067d2afae361a88d93bb336cd
SHA256

6eae57eaf5672693dfdbf540e379508e0bd79e3f86b88d0f1aa7e2dd8239aad4
SHA512

f95f61edbf6a43676bf39754dae948ed1105ab93f8e33033b098f02c78d044d9af859c53022e09c998dc49c04396f1b5b86ba74bb503135c58fcc7ad193713a8
SSDEEP

12288:mzk1APvNqFu6UlRWZoMQZKl7K9bvDzYQEfF2r9oaXnXL3T:mzk1GvN0hU3W6XZr9HEQEfF2xLXn73T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Brave.exe

Files

Brave.exe
.exe windows:6 windows x64 arch:x64

Password: ertyuiop

a4fe2afda9d4444df2d5f62a39d4ec75

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\scien\Desktop\ran\x64\Release\rainycheats.xys rust script.pdb

Imports

kernel32

GlobalUnlock
GetModuleHandleA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
VerifyVersionInfoW
QueryPerformanceCounter
HeapFree
SetPriorityClass
GetCurrentProcess
InitializeCriticalSectionEx
HeapSize
GetLastError
HeapReAlloc
CloseHandle
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
SetEndOfFile
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
GetConsoleOutputCP
WideCharToMultiByte
ReadConsoleW
GetConsoleMode
SetFilePointerEx
LCMapStringW
WriteFile
ExitProcess
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetFileType
GetStdHandle
ReadFile
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
GlobalLock
Sleep
GlobalFree
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
GlobalAlloc
MultiByteToWideChar
CreateThread
FlushFileBuffers
UnhandledExceptionFilter
RtlVirtualUnwind
EnterCriticalSection
LeaveCriticalSection
EncodePointer
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry

user32

SendInput
GetAsyncKeyState
GetSystemMetrics
GetDC
keybd_event
GetWindowTextA
mouse_event
DispatchMessageA
GetWindowRect
TranslateMessage
PeekMessageA
PostQuitMessage
GetDesktopWindow
UpdateWindow
GetWindowLongW
AdjustWindowRectEx
GetKeyState
LoadCursorA
DestroyWindow
SetWindowPos
MonitorFromWindow
EnumDisplayMonitors
ScreenToClient
SetWindowTextW
WindowFromPoint
ShowWindow
GetCapture
SetWindowLongA
ClientToScreen
IsChild
GetMonitorInfoA
GetForegroundWindow
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
SetCapture
SetCursor
SetWindowLongW
GetClientRect
UnregisterClassA
RegisterClassExA
ReleaseCapture
SetForegroundWindow
IsIconic
SetCursorPos
ReleaseDC
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData

gdi32

SetPixel
GetDeviceCaps

xinput1_4

ord4
ord2

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

d3d9

Direct3DCreate9

Sections

.text
Size: 565KB - Virtual size: 564KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 118KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: ertyuiop

a4fe2afda9d4444df2d5f62a39d4ec75

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

xinput1_4

imm32

d3d9

Sections

.text Size: 565KB - Virtual size: 564KB

.rdata Size: 169KB - Virtual size: 169KB

.data Size: 111KB - Virtual size: 118KB

.pdata Size: 23KB - Virtual size: 23KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 512B - Virtual size: 488B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 565KB - Virtual size: 564KB

.rdata
Size: 169KB - Virtual size: 169KB

.data
Size: 111KB - Virtual size: 118KB

.pdata
Size: 23KB - Virtual size: 23KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 512B - Virtual size: 488B

.reloc
Size: 2KB - Virtual size: 2KB