D:\Users\minami\Documents\GitHub\FluentWPF\FluentWPF\obj\Release\net45\FluentWPF.pdb
Overview
overview
8Static
static
3M Centers ...86.zip
windows7-x64
1M Centers ...86.zip
windows10-2004-x64
1FluentWPF.dll
windows7-x64
1FluentWPF.dll
windows10-2004-x64
1M Centers.exe
windows7-x64
6M Centers.exe
windows10-2004-x64
8M Centers.exe.config
windows7-x64
3M Centers.exe.config
windows10-2004-x64
3M Centers.pdb
windows7-x64
3M Centers.pdb
windows10-2004-x64
3MCentersLibrary.dll
windows7-x64
3MCentersLibrary.dll
windows10-2004-x64
3MCentersLibrary.pdb
windows7-x64
3MCentersLibrary.pdb
windows10-2004-x64
3MaterialDe...rs.dll
windows7-x64
1MaterialDe...rs.dll
windows10-2004-x64
1MaterialDe...pf.dll
windows7-x64
1MaterialDe...pf.dll
windows10-2004-x64
1MaterialDe...pf.xml
windows7-x64
3MaterialDe...pf.xml
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
M Centers 8th Edition 8.0.1.3 x86.zip
Resource
win7-20241023-en
Behavioral task
behavioral2
Sample
M Centers 8th Edition 8.0.1.3 x86.zip
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
FluentWPF.dll
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
FluentWPF.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral5
Sample
M Centers.exe
Resource
win7-20240903-en
Behavioral task
behavioral6
Sample
M Centers.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral7
Sample
M Centers.exe.config
Resource
win7-20240708-en
Behavioral task
behavioral8
Sample
M Centers.exe.config
Resource
win10v2004-20241007-en
Behavioral task
behavioral9
Sample
M Centers.pdb
Resource
win7-20241010-en
Behavioral task
behavioral10
Sample
M Centers.pdb
Resource
win10v2004-20241007-en
Behavioral task
behavioral11
Sample
MCentersLibrary.dll
Resource
win7-20240903-en
Behavioral task
behavioral12
Sample
MCentersLibrary.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral13
Sample
MCentersLibrary.pdb
Resource
win7-20240903-en
Behavioral task
behavioral14
Sample
MCentersLibrary.pdb
Resource
win10v2004-20241007-en
Behavioral task
behavioral15
Sample
MaterialDesignColors.dll
Resource
win7-20241010-en
Behavioral task
behavioral16
Sample
MaterialDesignColors.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral17
Sample
MaterialDesignThemes.Wpf.dll
Resource
win7-20240708-en
Behavioral task
behavioral18
Sample
MaterialDesignThemes.Wpf.dll
Resource
win10v2004-20241007-en
Behavioral task
behavioral19
Sample
MaterialDesignThemes.Wpf.xml
Resource
win7-20240729-en
Behavioral task
behavioral20
Sample
MaterialDesignThemes.Wpf.xml
Resource
win10v2004-20241007-en
General
-
Target
M Centers 8th Edition 8.0.1.3 x86.zip
-
Size
5.4MB
-
MD5
4e3da0bb21c0b963acefab653af34264
-
SHA1
c8051b4c267b11ec5b01db90c09b24d9b3799623
-
SHA256
c465d4f122c809bd22cdede1b082a39053f45dac204ae006760693545e4af73c
-
SHA512
c2a60fa6ba06743d4e4af3501e21f459e8dca28b4a1e9c38b41feff509d173dd8e1d00fb59cfdce50e3c2a9b09d10ba41c8ebdfd7b969f5ad8645b56e583398d
-
SSDEEP
98304:h7ERX5a05Oz8tjXaIzZQqm0pzrZM8atV4ef2KrqUrMrEDf4OPoiwjeBS7od:hgptA1AZQqmMXZyfDeUrM8oy5d
Malware Config
Signatures
-
Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/FluentWPF.dll unpack001/M Centers.exe unpack001/MCentersLibrary.dll unpack001/MaterialDesignColors.dll unpack001/MaterialDesignThemes.Wpf.dll
Files
-
M Centers 8th Edition 8.0.1.3 x86.zip.zip
-
FluentWPF.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 221KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
M Centers.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
H:\Users\compu\source\repos\M Centers 8.0\MCenters\obj\x86\Release\M Centers.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
M Centers.exe.config
-
M Centers.pdb
-
MCentersLibrary.dll.dll windows:6 windows x86 arch:x86
e7f58f87950d26bafd014d776e46cf9c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
H:\Users\compu\source\repos\M Centers 8.0\Release\MCentersLibrary.pdb
Imports
msvcp140
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??7ios_base@std@@QBE_NXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0_Lockit@std@@QAE@H@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xlength_error@std@@YAXPBD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1_Lockit@std@@QAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
vcruntime140
__FrameUnwindFilter
memcpy
memmove
__CxxFrameHandler3
__std_terminate
__std_exception_copy
_CxxThrowException
_except_handler4_common
__std_type_info_destroy_list
__current_exception
__current_exception_context
memset
__std_exception_destroy
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_initterm_e
_initterm
_seh_filter_dll
_initialize_onexit_table
_cexit
_register_onexit_function
_initialize_narrow_environment
terminate
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
abort
_execute_onexit_table
api-ms-win-crt-stdio-l1-1-0
fsetpos
fclose
_get_stream_buffer_pointers
fread
fwrite
fgetpos
_fseeki64
fputc
setvbuf
fflush
ungetc
fgetc
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
free
kernel32
GetCurrentThreadId
WideCharToMultiByte
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
Sleep
mscoree
_CorDllMain
Sections
.text Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 475KB - Virtual size: 474KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MCentersLibrary.pdb
-
MaterialDesignColors.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\MaterialDesignInXamlToolkit\MaterialDesignInXamlToolkit\MaterialDesignColors.Wpf\obj\Release\net462\MaterialDesignColors.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 307KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MaterialDesignThemes.Wpf.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
D:\a\MaterialDesignInXamlToolkit\MaterialDesignInXamlToolkit\MaterialDesignThemes.Wpf\obj\Release\net462\MaterialDesignThemes.Wpf.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 9.4MB - Virtual size: 9.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
MaterialDesignThemes.Wpf.xml.xml