E:\rat\paste\x64\Release\D.pdb
Static task
static1
1 signatures
General
-
Target
Plaguecheat v1 fix.zip
-
Size
4.3MB
-
MD5
533a6f402275bb6eed2facd8feddd677
-
SHA1
31aa6a6b0c599e05d3123fbf7b1226ad9687de82
-
SHA256
f92e902ea9b3f354df30c360b8d788b6a338c546ffe568ce6806bb182477c457
-
SHA512
6aab1f81265d6e2428b9f74c2d070e4664cc0feaa15888fdadb8dc7765a7f6a8d010f9b19d358d30618046c5352de5cf533cf4b856c2f2dff298f9d68a2771f1
-
SSDEEP
98304:eq35yy+K9v8JFAlpJun3r+zfWohqZsrXli1X/OGbqJWibTdD:H5yyTv8EureWo8ZKcPOGbqJNT1
Score
3/10
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/plaguecheatv1.dll unpack001/steampl.dll
Files
-
Plaguecheat v1 fix.zip.zip
-
plaguecheatv1.dll.dll windows:6 windows x64 arch:x64
cf4446ee8dbd4c3ec0234be7e1c170fd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
SizeofResource
SetConsoleTitleA
VirtualAlloc
FindResourceA
LoadLibraryA
LockResource
CreateThread
LoadResource
GetProcAddress
AllocConsole
VirtualFree
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
GetCurrentProcessId
GetModuleHandleW
FlushInstructionCache
SetThreadContext
OpenThread
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
InitializeSListHead
GetSystemTimeAsFileTime
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception
__C_specific_handler
__std_exception_copy
__std_exception_destroy
memcpy
memset
__current_exception_context
_CxxThrowException
__std_type_info_destroy_list
memmove
api-ms-win-crt-stdio-l1-1-0
freopen_s
__acrt_iob_func
__stdio_common_vfprintf
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_cexit
_initterm
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm_e
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_crt_atexit
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
Sections
.text Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8.4MB - Virtual size: 8.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
steampl.dll.dll windows:6 windows x86 arch:x86
e348faf8c44d6b52974654b65f17fab4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Users\user13\source\repos\Steam_Module\Release\Steam_Module.pdb
Imports
kernel32
VirtualAlloc
LoadLibraryA
CreateThread
GetProcAddress
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
InitializeSListHead
msvcp140
?_Xlength_error@std@@YAXPBD@Z
vcruntime140
__current_exception_context
__current_exception
_except_handler4_common
__std_exception_destroy
__CxxFrameHandler3
memcpy
_CxxThrowException
__std_exception_copy
__std_type_info_destroy_list
memset
api-ms-win-crt-stdio-l1-1-0
freopen
__acrt_iob_func
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo_noreturn
_initterm
_initterm_e
_cexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
terminate
_crt_atexit
_initialize_narrow_environment
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ