MCentersUWP_1[.]0[.]8[.]0_x64_Debug[.]msixbundle

Sharing

Copy URL

Twitter E-mail

General

Target

MCentersUWP_1.0.8.0_x64_Debug.msixbundle
Size

102KB
MD5

fedbbdd4c99a1ec8cba1a7a289f82e0e
SHA1

aa578c6a97748070b8dda26af20472a7e2e6bcba
SHA256

e3fb485671db48341a1a19208a4343c548c5924a2f629173f890fc5a101c0f6d
SHA512

77d740747950da3f23bdfa4cbfacc8a3e9f9a8aa8d59216123d6f6086158d925cfbdd2d631f7f16f34d9f1fd650d8c00de094e4b417ef2a002b3fc0020340bdd
SSDEEP

1536:Dbsl/UUgsT8G8/2pJ5AAFsSsAM7tIM//xdJzCnZiG8oMvErpk7kn28zgylOFzKDY:fazgtivUdQpBBl2K1USFAmFNaEu

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack002/MCenters/MCenters.exe
unpack002/MCenters/Resources.dll

Files

MCentersUWP_1.0.8.0_x64_Debug.msixbundle
.zip
AppxBlockMap.xml
.xml
AppxMetadata/AppxBundleManifest.xml
.xml
AppxSignature.p7x
MCentersUWP_1.0.8.0_x64_Debug.msix
.appx
AppxBlockMap.xml
.xml
AppxManifest.xml
.xml
AppxMetadata/CodeIntegrity.cat
AppxSignature.p7x
Images/LockScreenLogo.scale-200.png
.png
Images/SplashScreen.scale-200.png
.png
Images/Square150x150Logo.scale-200.png
.png
Images/Square44x44Logo.scale-200.png
.png
Images/Square44x44Logo.targetsize-24_altform-unplated.png
.png
Images/StoreLogo.png
.png
Images/Wide310x150Logo.scale-200.png
.png
MCenters/MCenters.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\opMcN\source\repos\MCenters\M Centers\obj\Debug\MCenters.pdb

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
MCenters/MCenters.exe.config
MCenters/Resources.dll
.dll windows:6 windows x64 arch:x64

fef85c9fb13953ab7136de1d6e3f1592

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\opMcN\source\repos\MCenters\x64\Debug\Resources.pdb

Imports

kernel32

InitializeCriticalSectionEx
DeleteCriticalSection
GetCurrentProcess
OpenProcess
ReadProcessMemory
SetLastError
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
GetLastError
CloseHandle
WriteProcessMemory
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
Sleep
LeaveCriticalSection
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
RaiseException
MultiByteToWideChar
WideCharToMultiByte
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetProcAddress
OutputDebugStringW
EnterCriticalSection

user32

UnregisterClassW

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueW

ole32

CoInitializeEx
CoCreateInstance
CoUninitialize

msvcp140d

??0_Lockit@std@@QEAA@H@Z
?_Xlength_error@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ

vcruntime140d

__current_exception_context
__C_specific_handler
__C_specific_handler_noexcept
__vcrt_GetModuleHandleW
__std_type_info_destroy_list
__std_exception_destroy
__current_exception
memset
memmove
memcpy
__vcrt_GetModuleFileNameW
__vcrt_LoadLibraryExW
_CxxThrowException
__std_exception_copy
__FrameUnwindFilter

vcruntime140_1d

__CxxFrameHandler4

ucrtbased

_invalid_parameter_noinfo
_errno
_recalloc
_wmakepath_s
strcpy_s
terminate
_initterm_e
_initterm
_free_dbg
_cexit
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
__stdio_common_vsprintf_s
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_callnewh
_CrtDbgReport
malloc
free
__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf
_stricmp
wcslen
wcscat
wcscpy_s
_invalid_parameter
_wsplitpath_s
_initialize_onexit_table
strcat_s
abort
_CrtDbgReportW

mscoree

_CorDllMain

Exports

Exports

?AddError@@YAXPEB_W@Z
?AddLog@@YAXPEB_W@Z
EnableDebugPriv
GetHandles
IsValidApp
LaunchApp
ModifyApp

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nep
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 336B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Package.appinstaller
.xml
[Content_Types].xml
.xml
resources.pri
[Content_Types].xml
.xml

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 10KB - Virtual size: 9KB

.rsrc Size: 4KB - Virtual size: 4KB

fef85c9fb13953ab7136de1d6e3f1592

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

ole32

msvcp140d

vcruntime140d

vcruntime140_1d

ucrtbased

mscoree

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 45KB

.nep Size: 1KB - Virtual size: 1KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 1KB - Virtual size: 12KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 336B

.text
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 4KB - Virtual size: 4KB

.text
Size: 45KB - Virtual size: 45KB

.nep
Size: 1KB - Virtual size: 1KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 1KB - Virtual size: 12KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 336B