C:\Users\roka\Downloads\nigjector\nigjector\x64\Release\Rain Executor.pdb
Static task
static1
1 signatures
General
-
Target
Rain Executor.exe
-
Size
52KB
-
MD5
21717a55466bbc0bf15b609afbf15d42
-
SHA1
4513a474ae3363406219aa305ce41d70fc4ba19b
-
SHA256
e49b8fd9f2c059f5373337185da053649ba1f2f8efbd787a8ed5cbbbc062965d
-
SHA512
19317e869fd4349b21ca8d6b261ca8221147af618bcc6179b717bc6ed6701856a7ee650bc8d4cd55bba6f3b7c5c8705aa904fbece259c57c7fa4dfe78a148f3b
-
SSDEEP
768:7A2L8oqG0RPm4nzvndLb2giGTQLEJx0iG5KfyUaW3HvcUTjI:03/G2nZTQLaanrW3TTj
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Rain Executor.exe
Files
-
Rain Executor.exe.exe windows:6 windows x64 arch:x64
ac5ff9015960423bd8890f1ae5eef98d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
appcore
ulDestroyApp
ulWindowGetHeight
ulAppQuit
ulOverlayResize
ulAppGetMainMonitor
ulWindowGetWidth
ulDestroyWindow
ulDestroyOverlay
ulAppRun
ultralight
ulViewLockJSContext
webcore
JSStringRelease
JSValueMakeUndefined
JSStringGetUTF8CString
JSStringGetMaximumUTF8CStringSize
JSStringCreateWithUTF8CString
JSEvaluateScript
JSValueToStringCopy
kernel32
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
OpenProcess
CreateToolhelp32Snapshot
Sleep
Process32NextW
Process32FirstW
CloseHandle
Module32FirstW
Module32NextW
GetConsoleWindow
WriteProcessMemory
LoadLibraryA
VirtualProtectEx
FreeLibrary
GetCurrentProcess
GetProcAddress
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
user32
FindWindowA
PostThreadMessageA
GetWindowThreadProcessId
ShowWindow
SetWindowsHookExA
UnhookWindowsHookEx
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Thrd_detach
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
__std_exception_copy
__C_specific_handler
__current_exception
__current_exception_context
_CxxThrowException
memset
memchr
memcmp
memcpy
__std_terminate
memmove
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
_set_fmode
__acrt_iob_func
__p__commode
api-ms-win-crt-string-l1-1-0
_wcsicmp
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
exit
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_crt_atexit
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
_exit
_beginthreadex
_initterm_e
_initterm
_get_initial_narrow_environment
terminate
_set_app_type
_seh_filter_exe
_cexit
_configure_narrow_argv
api-ms-win-crt-heap-l1-1-0
malloc
free
_set_new_mode
_callnewh
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 116B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ