C:\Users\pc\source\repos\XILLY PROGRAM 4.0\obj\x64\Debug\XILLY PROGRAM 4.0.pdb
Static task
static1
General
-
Target
15$ pack.zip
-
Size
868KB
-
MD5
e51a5d8d780719ba5a4ce0b766484ce2
-
SHA1
62c0f94a03099d50bc6572c0ec110773c48d106c
-
SHA256
50425af9fc43ad148f0b286f7bdae1be440b5eaa1e9ffa3efff3b949d9dc5020
-
SHA512
9ee38b4a7026555bd09b3a3c9df52d8acabe76d265c8958fa72b5915d6a65c7d16265321714f7c17f6d836a8856aabfbf2f1989383a1c1cc106ab882ecf63340
-
SSDEEP
24576:nGHQ03zI2A69jOxs839HCVpo3/snC6W/cDMizUaR:Gw03HA696x539GpisC3/tizJ
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/15$ pack/KARMA PROGRAM 4.0.exe unpack001/15$ pack/Xilly_Pack_11.0.exe
Files
-
15$ pack.zip.zip
-
15$ pack/20_Decimal.reg
-
15$ pack/KARMA PROGRAM 4.0.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Sections
.text Size: 418KB - Virtual size: 418KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
15$ pack/NETWORK_PACK_1_1_1.bat
-
15$ pack/OPTIMIZE/3 GPU Settings/NVIDIA Settings/Unhide SILK Smoothness (PC Only).reg
-
15$ pack/OPTIMIZE/5/1 Delete Temporary Files.bat.bat .vbs
-
15$ pack/OPTIMIZE/5/2 Disable Prefetch.bat.bat .vbs
-
15$ pack/OPTIMIZE/5/3 Delete Prefetch Files.lnk.lnk
-
15$ pack/OPTIMIZE/5/4 Disk Clean-Up.lnk.lnk
-
15$ pack/OPTIMIZE/5/Cache Cleaner.bat
-
15$ pack/OPTIMIZE/5/CleanTempFiles.bat
-
15$ pack/OPTIMIZE/5/CompressedTimer.BAT
-
15$ pack/OPTIMIZE/5/D Prefetch.bat.bat .vbs
-
15$ pack/OPTIMIZE/5/D Temp.bat.bat .vbs
-
15$ pack/OPTIMIZE/5/Delete Log Files.bat
-
15$ pack/OPTIMIZE/5/Delete Temporary Files.bat
-
15$ pack/OPTIMIZE/5/Disable All Mitigations.bat
-
15$ pack/OPTIMIZE/5/Disable HPET.bat
-
15$ pack/OPTIMIZE/5/Latency Optimizations.cmd
-
15$ pack/OPTIMIZE/5/Lower Input Delay.bat
-
15$ pack/OPTIMIZE/5/Lower System Latency.bat
-
15$ pack/OPTIMIZE/5/Timer Res Value Bat.bat
-
15$ pack/OPTIMIZE/5/Ultimate Performance Power Plan.cmd
-
15$ pack/OPTIMIZE/Tweaks/FPS.txt
-
15$ pack/OPTIMIZE/Tweaks/Reduce Latency Ingame/TimerSetResolution.txt
-
15$ pack/OPTIMIZE/Tweaks/Registry/Diagnostics Services.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Disable Background Apps.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Disable Game Bar.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Disable Game DVR.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Disable Maps.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Disable Printer Services.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Disable Transparency.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Disable Xbox Services.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/FN-HighPriority.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Limited User Account Control.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Power Throttling.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Spectre Meltdown Protection.reg
-
15$ pack/OPTIMIZE/Tweaks/Registry/Unnecessary Services.reg
-
15$ pack/OPTIMIZE/Νέος φάκελος/AMD Thread Priority.reg
-
15$ pack/OPTIMIZE/Νέος φάκελος/NVIDIA Thread Priority.reg
-
15$ pack/OPTIMIZE/Νέος φάκελος/Re-Enable Stock GPU Optimization.reg
-
15$ pack/OPTIMIZE/Νέος φάκελος/Re-Enable Stock fullscreen.reg
-
15$ pack/OPTIMIZE/Νέος φάκελος/Revert AMD Thread Priority.reg
-
15$ pack/OPTIMIZE/Νέος φάκελος/Revert NVIDIA Thread Priority.reg
-
15$ pack/OPTIMIZE/Νέος φάκελος/Revert to Normal FullScreenOptimization Globally.reg
-
15$ pack/OPTIMIZE/Νέος φάκελος/Ultimate performance Code.txt
-
15$ pack/OPTIMIZE/Νέος φάκελος/Windows 10 CPU Optimizations.reg
-
15$ pack/Xilly_Exclusive_Twitter_Pack_1.bat
-
15$ pack/Xilly_Pack_11.0.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\pc\source\repos\Xilly Pack 3.0\obj\x64\Debug\Xilly Pack 3.0.pdb
Sections
.text Size: 565KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
15$ pack/Xillys_Ultimate_Pack_1_1.bat
-
15$ pack/latency.reg