Modrinth App[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Modrinth App.exe
Size

13.3MB
MD5

6ce0d11bdca68114c3bb74f18df354f9
SHA1

45b4b5b6b86633fcef5028efa342ad718f1fe753
SHA256

763e32b8e0683741afd455667600a16a593efdd4085b27db94582172e2588fda
SHA512

ef95cd1daa9210533096348935362273367a11ae35fa1f743c52fc4bb0952e7bf3aad9581aff7fbf7ada5c02c647fdb6aa2bda583c81b9ca61b92ac5b5a7b941
SSDEEP

98304:jQiMGY2IQqh213iN9amuGPLuAw8Dm31dOTJdYsSt4AG9ipkW27ucDCNUvszdhbty:Km31muCLuAwWpEkr6cDCNUQ9JHxI

Score

1^/10

Malware Config

Signatures

Files

Modrinth App.exe
.exe windows:6 windows x64 arch:x64

01c6e9d2d59d0306e0dc9927064afdd9

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

02:3e:3e:41:51:5b:f5:9a:72:3f:a8:d2:46:a5:ff:33
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

16/06/2023, 00:00

Not After

16/06/2025, 23:59

Subject

SERIALNUMBER=6260755,CN=Rinth\, Inc.,O=Rinth\, Inc.,L=Chandler,ST=Arizona,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

59:dc:6c:77:1e:fe:72:fe:c7:20:ab:0d:a7:dd:ce:c6:85:d6:eb:18:f7:79:08:ea:19:27:2c:12:fc:9d:47:6b
Signer

Actual PE Digest

59:dc:6c:77:1e:fe:72:fe:c7:20:ab:0d:a7:dd:ce:c6:85:d6:eb:18:f7:79:08:ea:19:27:2c:12:fc:9d:47:6b

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

theseus_gui.pdb

Imports

api-ms-win-core-synch-l1-2-0

WakeByAddressAll
WaitOnAddress
WakeByAddressSingle

bcryptprimitives

ProcessPrng

shell32

DragFinish
SHAppBarMessage
DragQueryFileW
SHCreateItemFromParsingName
ShellExecuteW
ord155
SHGetKnownFolderPath
ShellExecuteExW
ord190
SHOpenFolderAndSelectItems

kernel32

SetThreadStackGuarantee
AddVectoredExceptionHandler
GetSystemInfo
GetCurrentThreadId
GetNativeSystemInfo
GetProcAddress
GetModuleHandleA
GetSystemTimePreciseAsFileTime
LoadLibraryW
CreateSemaphoreW
GetFullPathNameW
WaitForSingleObjectEx
CreateFileW
ReadDirectoryChangesW
CancelIo
ReleaseSemaphore
SetFileAttributesW
CreatePipe
GetTimeZoneInformationForYear
CopyFileExW
GetFileInformationByHandleEx
MoveFileExW
RegisterWaitForSingleObject
Sleep
GetModuleHandleW
GetLastError
TlsSetValue
HeapReAlloc
CreateMutexW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
SetEvent
SetEnvironmentVariableW
ResetEvent
ReleaseMutex
InitializeSListHead
IsDebuggerPresent
GetCurrentProcessId
GetProcessId
CloseHandle
RtlUnwindEx
SetHandleInformation
GetCurrentThread
GetStdHandle
GetConsoleMode
lstrlenW
WaitForSingleObject
MultiByteToWideChar
WriteConsoleW
SetLastError
CreateWaitableTimerExW
SetWaitableTimer
QueryPerformanceFrequency
FormatMessageW
GetCurrentDirectoryW
GetCurrentProcess
CreateMutexA
WideCharToMultiByte
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetEnvironmentVariableW
GetTempPathW
GetModuleFileNameW
GetCommandLineW
SetFileInformationByHandle
GetFileInformationByHandle
GetFinalPathNameByHandleW
SetFilePointerEx
FindNextFileW
CreateDirectoryW
TlsFree
FindClose
GetComputerNameExW
LoadLibraryA
GetUserPreferredUILanguages
LoadLibraryExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
DuplicateHandle
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
CreateNamedPipeW
CreateThread
ReadFileEx
SleepEx
WriteFileEx
WaitForMultipleObjects
GetOverlappedResult
GetExitCodeProcess
CreateEventW
ReadFile
ExitProcess
TerminateProcess
QueryPerformanceCounter
HeapAlloc
GetProcessHeap
DeleteFileW
CreateSymbolicLinkW
GetDriveTypeW
GetVolumeInformationW
GetVolumePathNamesForVolumeNameW
GetDiskFreeSpaceExW
DeviceIoControl
SwitchToThread
HeapFree
RtlPcToFileHeader
EncodePointer
DeleteCriticalSection
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
RaiseException
AreFileApisANSI
HeapCreate
WriteFile
GetDiskFreeSpaceW
OutputDebugStringA
LockFile
SetFilePointer
GetFullPathNameA
SetEndOfFile
UnlockFileEx
UnmapViewOfFile
HeapValidate
HeapSize
GetTempPathA
GetFileAttributesA
GetFileAttributesExW
OutputDebugStringW
FlushViewOfFile
CreateFileA
DeleteFileA
HeapCompact
HeapDestroy
UnlockFile
LocalFree
GetQueuedCompletionStatusEx
LockFileEx
GetFileSize
SystemTimeToFileTime
FreeLibrary
GetSystemTimeAsFileTime
GetSystemTime
FormatMessageA
CreateIoCompletionPort
CreateFileMappingW
MapViewOfFile
GetTickCount
FlushFileBuffers
GetVersionExA
GlobalMemoryStatusEx
GetDiskFreeSpaceA
LCIDToLocaleName
GetUserDefaultUILanguage
FindFirstFileW
LoadLibraryExA
SetFileCompletionNotificationModes
TlsAlloc
FindFirstVolumeW
FindNextVolumeW
FindVolumeClose
PostQueuedCompletionStatus
TlsGetValue
UnregisterWaitEx
RtlUnwind

dwmapi

DwmEnableBlurBehindWindow
DwmGetWindowAttribute
DwmSetWindowAttribute

ntdll

NtReadFile
NtDeviceIoControlFile
NtCreateFile
NtWriteFile
NtCancelIoFileEx
RtlGetVersion
RtlNtStatusToDosError

advapi32

RegCloseKey
RegOpenKeyExW
GetUserNameW
RegEnumKeyExW
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
RegGetValueW
RegQueryValueExW
RegCreateKeyExW
SystemFunction036
RegSetValueExW
RegDeleteTreeW

user32

GetActiveWindow
MonitorFromRect
SetWindowDisplayAffinity
GetWindowTextW
GetWindowTextLengthW
SetWindowTextW
ToUnicodeEx
GetKeyboardLayout
MapVirtualKeyExW
GetKeyboardState
SystemParametersInfoW
ReleaseCapture
GetMonitorInfoW
SetWindowPlacement
ChangeDisplaySettingsExW
SetWindowLongW
ShowCursor
SetPropW
GetWindowPlacement
RegisterRawInputDevices
AdjustWindowRectEx
GetMenu
GetWindowLongW
InvalidateRgn
SetWindowPos
RegisterWindowMessageA
ClipCursor
MonitorFromPoint
EnumDisplayMonitors
SetParent
AdjustWindowRect
FindWindowExW
RedrawWindow
GetParent
GetSystemMenu
EnumChildWindows
IsWindowVisible
GetClientRect
SetWindowRgn
GetWindowLongPtrW
IsIconic
IsWindow
GetTouchInputInfo
RegisterTouchWindow
CreateIcon
TrackMouseEvent
DefWindowProcW
CreateWindowExW
DestroyWindow
PostThreadMessageW
FlashWindowEx
GetForegroundWindow
LoadCursorW
SetCursor
SetCursorPos
GetAsyncKeyState
TranslateMessage
GetKeyState
CloseTouchInputHandle
DispatchMessageW
ScreenToClient
SetCapture
GetMessageW
MessageBoxW
IsProcessDPIAware
TrackPopupMenu
SetForegroundWindow
ClientToScreen
MonitorFromWindow
GetCursorPos
EnableMenuItem
CreatePopupMenu
CreateMenu
DrawIconEx
GetDC
AppendMenuW
InsertMenuW
CheckMenuItem
DrawTextW
ReleaseDC
GetWindowDC
OffsetRect
GetWindowRect
MapWindowPoints
GetMenuBarInfo
FillRect
PostQuitMessage
ShowWindow
SendInput
SystemParametersInfoA
DrawMenuBar
CreateAcceleratorTableW
DestroyAcceleratorTable
DestroyMenu
SetMenu
RemoveMenu
DestroyIcon
PeekMessageW
DispatchMessageA
GetMessageA
GetClipCursor
SetWindowLongPtrW
MsgWaitForMultipleObjectsEx
GetRawInputData
ValidateRect
PostMessageW
GetSystemMetrics
GetUpdateRect
TranslateAcceleratorW
SetMenuItemInfoW
RegisterClassExW
SendMessageW
FindWindowW
GetMenuItemInfoW
MapVirtualKeyW

comctl32

DefSubclassProc
TaskDialogIndirect
SetWindowSubclass
RemoveWindowSubclass

crypt32

CertOpenStore
CertVerifyCertificateChainPolicy
CertFreeCertificateChain
CertDuplicateCertificateChain
CertDuplicateStore
CertFreeCertificateContext
CertGetCertificateChain
CertAddCertificateContextToStore
CertEnumCertificatesInStore
CertCloseStore
CertDuplicateCertificateContext

ole32

CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop

bcrypt

BCryptGenRandom

ws2_32

WSAGetLastError
getsockname
WSAIoctl
closesocket
recv
WSASocketW
ioctlsocket
getsockopt
bind
setsockopt
getpeername
getaddrinfo
freeaddrinfo
WSAStartup
WSACleanup
send
WSASend
connect
shutdown

gdi32

SetTextColor
CreateRectRgn
SetBkMode
CombineRgn
DeleteObject
CreateCompatibleDC
CreateSolidBrush
CreateDIBSection
SelectObject
BitBlt
DeleteDC
GetDeviceCaps

secur32

DeleteSecurityContext
EncryptMessage
ApplyControlToken
FreeContextBuffer
AcquireCredentialsHandleA
InitializeSecurityContextW
AcceptSecurityContext
DecryptMessage
FreeCredentialsHandle
QueryContextAttributesW

oleaut32

SysFreeString
SetErrorInfo
SysStringLen
GetErrorInfo

shlwapi

SHCreateMemStream

api-ms-win-crt-string-l1-1-0

strcspn
strncmp
_wcsicmp
strcmp
strlen
wcscmp
strspn
wcslen
strncpy
wcsncmp
strcpy_s

api-ms-win-crt-math-l1-1-0

_dclass
pow
trunc
floor
round
__setusermatherr
log
fabs

api-ms-win-crt-heap-l1-1-0

realloc
free
_callnewh
_set_new_mode
calloc
_msize
malloc

api-ms-win-crt-stdio-l1-1-0

__p__commode
__stdio_common_vsprintf
_set_fmode

api-ms-win-crt-utility-l1-1-0

qsort
_rotl64

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-runtime-l1-1-0

abort
_get_initial_narrow_environment
_initterm
terminate
_initterm_e
exit
_initialize_narrow_environment
_set_app_type
_exit
_crt_atexit
__p___argc
__p___argv
_cexit
_c_exit
_configure_narrow_argv
_register_onexit_function
_endthreadex
_register_thread_local_exe_atexit_callback
_beginthreadex
_initialize_onexit_table
_seh_filter_exe

api-ms-win-crt-convert-l1-1-0

_wtoi
wcstol
_ultow_s

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 9.5MB - Virtual size: 9.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01c6e9d2d59d0306e0dc9927064afdd9

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

02:3e:3e:41:51:5b:f5:9a:72:3f:a8:d2:46:a5:ff:33Certificate

Extended Key Usages

Key Usages

59:dc:6c:77:1e:fe:72:fe:c7:20:ab:0d:a7:dd:ce:c6:85:d6:eb:18:f7:79:08:ea:19:27:2c:12:fc:9d:47:6bSigner

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-core-synch-l1-2-0

bcryptprimitives

shell32

kernel32

dwmapi

ntdll

advapi32

user32

comctl32

crypt32

ole32

bcrypt

ws2_32

gdi32

secur32

oleaut32

shlwapi

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 9.5MB - Virtual size: 9.5MB

.rdata Size: 3.5MB - Virtual size: 3.5MB

.data Size: 42KB - Virtual size: 54KB

.pdata Size: 190KB - Virtual size: 190KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 53KB - Virtual size: 53KB

.reloc Size: 63KB - Virtual size: 63KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

02:3e:3e:41:51:5b:f5:9a:72:3f:a8:d2:46:a5:ff:33
Certificate

59:dc:6c:77:1e:fe:72:fe:c7:20:ab:0d:a7:dd:ce:c6:85:d6:eb:18:f7:79:08:ea:19:27:2c:12:fc:9d:47:6b
Signer

.text
Size: 9.5MB - Virtual size: 9.5MB

.rdata
Size: 3.5MB - Virtual size: 3.5MB

.data
Size: 42KB - Virtual size: 54KB

.pdata
Size: 190KB - Virtual size: 190KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 53KB - Virtual size: 53KB

.reloc
Size: 63KB - Virtual size: 63KB