MB.Liquid.Glass.1.0.3.rar
- SHA256 46a8c5880319766a1fdac54f6e9465eee5fff764fff58012192fb3f5ad3ac437
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MB.Liquid.Glass.1.0.3/MBLiquidGlass.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
MB.Liquid.Glass.1.0.3/MBLiquidGlass.dll
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
0 signatures
900 seconds
Behavioral task
behavioral3
Sample
MB.Liquid.Glass.1.0.3/MBLiquidGlass.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
900 seconds
General
- Target MB.Liquid.Glass.1.0.3.rar
- Size 391KB
- Sample260624-pgvbcsbz3x
- SHA256 46a8c5880319766a1fdac54f6e9465eee5fff764fff58012192fb3f5ad3ac437
- MD5 d22959c8786f07c5f8dedbaa25c708c1
- SHA1 3cbec386f2c20b747ee293632d073c0be738c684
- SHA512 2c847c077b614ae86faf45266aebd5a5edd7faadd67dfe379a23f19bd4bef6dcdbd45422acacbe3fd0506d3605365917e8acb075cf64cbcc6e0bd9a5fd3e6000
- SSDEEP 12288:bbxLvCSQsx6n9tJkttj38k7I4MFt5PlJDdIqbUGdquF7cVa+PQc:7g9bw7I4M/5PlPAjuWP9
- TLSH T1678423CF26D3CD974AB8CE298C97E826FDC521A1D3529B48B6D5E3F9933390A47D0520
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/MB.Liquid.Glass.1.0.3/MBLiquidGlass.aex
File Explorer
-
MB.Liquid.Glass.1.0.3.rar.rar 391KB
-
MB.Liquid.Glass.1.0.3/How to install.txt117B
-
MB.Liquid.Glass.1.0.3/MBLiquidGlass.aex.dll 1.1MB
MB.Liquid.Glass.1.0.3/How to install.txt
- SHA256 2837417f440937f4741905179bbd83695b03aaea1ea3c7c5bd186663c7dbb8a0
- MD5 d309b2768e81e9975414ad7703f8acb4
- SHA1 b62ef820f18220f017a386271bc8e8390b013b5c
- SHA512 69151f15960dea8c4ed0f76ec8f6297912d21a6ddaefc2eef25c55e5bff670b469262cfc5f2ee6fc96516b23a9d58e958f38aa8c6ef3471f2e79d4c8edd7ff52
- TLSH T1D9B0228F008300AF380FE2C8F3C03C03BC883208C3080800E33083EA8382B03C8A22BA
- MD5 SHA1 SHA512 TLSH
MB.Liquid.Glass.1.0.3/MBLiquidGlass.aex
- IMPHASH 1d6ab1844bda1b61423bb99abe9124b5
- SHA256 096541ac177592a546b08945e08f1bd0580f2b5ea549d566fe0aff4eca3298b6
- MD5 743a7d8018dc4ef23ba08b7810f943fd
- SHA1 de6d2ff1422d90ea96ffb4bbedb501202b6e977c
- SHA512 7d2731ea8ca92d9aeb2b1459ce65668a4423b15a41a9ad97a65bd305fc234a27a357687daf93f7b4b101e7ab986fe598b0c4ae70b032688e3e590d1bddad5fe2
- SSDEEP 12288:9s58TxSfjdu7FiIK04Zpb/TkC6tLqG54P/OZHDjHnfZm:uKFwjduZid04ZBb/4f4P/OBHnBm
- TLSH T182359D16D35410A8C067E1B5DE971A17E7B1702BD320AEEB37DC49623F16BA1673BB10
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
592364
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\asir6\Desktop\MBAELiquidGlass\Liquid-Glass\MBLiquidGlass\Win\x64\Release\Out\MBLiquidGlass.pdb
opencl
clSetKernelArg
clCreateProgramWithSource
clCreateKernel
clEnqueueWriteBuffer
clGetProgramBuildInfo
clRetainMemObject
clReleaseMemObject
clGetPlatformIDs
clCreateContext
clRetainCommandQueue
clRetainContext
clReleaseContext
clGetDeviceIDs
clEnqueueReadBuffer
clFinish
clCreateCommandQueue
clReleaseKernel
clReleaseProgram
clReleaseCommandQueue
clBuildProgram
clEnqueueNDRangeKernel
clCreateBuffer
kernel32
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetSystemTime
SetFileTime
SetFileAttributesA
CreateFileA
InitializeSListHead
GetCurrentThreadId
FreeLibrary
GetProcAddress
LoadLibraryExA
GetEnvironmentVariableA
CreateDirectoryA
CloseHandle
GetLastError
QueryPerformanceCounter
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
InitializeSRWLock
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
TryEnterCriticalSection
DeleteCriticalSection
Sleep
GetCurrentProcessId
SwitchToThread
SystemTimeToFileTime
advapi32
GetUserNameA
shell32
ShellExecuteA
SHGetFolderPathA
msvcp140
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?width@ios_base@std@@QEAA_J_J@Z
?width@ios_base@std@@QEBA_JXZ
?flags@ios_base@std@@QEBAHXZ
?good@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
_Query_perf_frequency
_Query_perf_counter
?_Xbad_alloc@std@@YAXXZ
_Thrd_detach
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?always_noconv@codecvt_base@std@@QEBA_NXZ
_Mtx_init_in_situ
_Mtx_lock
_Mtx_unlock
?id@?$ctype@D@std@@2V0locale@2@A
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z
?gcount@?$basic_istream@DU?$char_traits@D@std@@@std@@QEBA_JXZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEA_K@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
??7ios_base@std@@QEBA_NXZ
?setf@ios_base@std@@QEAAHHH@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAADD@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
_Thrd_hardware_concurrency
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?uncaught_exception@std@@YA_NXZ
?_Id_cnt@id@locale@std@@0HA
?_Xout_of_range@std@@YAXPEBD@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Xlength_error@std@@YAXPEBD@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_id
_Thrd_join
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEBAPEADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXPEAD00@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
wininet
HttpQueryInfoA
HttpSendRequestA
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetReadFile
InternetSetOptionA
HttpOpenRequestA
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
__current_exception
__std_exception_destroy
__std_exception_copy
__std_terminate
memcmp
memset
__std_type_info_destroy_list
memcpy
_CxxThrowException
memmove
__C_specific_handler
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-math-l1-1-0
sqrtf
floorf
_hypotf
pow
exp
cos
ceil
atan2
ilogb
lround
hypot
nearbyint
sin
sqrt
round
floor
tan
api-ms-win-crt-stdio-l1-1-0
ungetc
setvbuf
fopen
fsetpos
fread
fflush
fclose
fgetpos
__stdio_common_vsprintf
fopen_s
fputc
_fseeki64
_get_stream_buffer_pointers
__stdio_common_vfprintf
fgetc
fwrite
api-ms-win-crt-runtime-l1-1-0
_errno
_beginthreadex
terminate
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_getpid
_initterm
_initterm_e
_invoke_watson
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
_mkdir
api-ms-win-crt-convert-l1-1-0
atoi
_strtoi64
atol
strtol
api-ms-win-crt-time-l1-1-0
strftime
_localtime64_s
_time64
_localtime64
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-heap-l1-1-0
malloc
free
calloc
_callnewh
api-ms-win-crt-string-l1-1-0
strncpy
strncmp
toupper
tolower
strlen
strcpy
strcmp
ws2_32
closesocket
connect
ioctlsocket
getsockname
htonl
htons
inet_addr
bind
recvfrom
select
send
sendto
setsockopt
socket
gethostname
WSAStartup
WSACleanup
WSAGetLastError
__WSAFDIsSet
getaddrinfo
freeaddrinfo
inet_ntop
recv
iphlpapi
GetAdaptersInfo
?aescriptsGetLicLibVersionString@@YAHAEAY0IA@D@Z
?aescriptsSaveLicenseToFileEx@@YAHPEBD0QEAD1AEAUaescriptsLicenseData@@@Z
EffectMain
NvOptimusEnablementCuda
aescriptsAddBlockedSerial
aescriptsCheckOveruse
aescriptsConfigure
aescriptsDropLicenseFromLicenseServer
aescriptsGetLicLibVersion
aescriptsGetLicenseDataFromFile
aescriptsGetLicenseServerConfig
aescriptsGetMachineId
aescriptsGetRawLicenseDataFromFile
aescriptsInitLicenseData
aescriptsLoadLicenseFromFile
aescriptsRequestLicenseFromLicenseServer
aescriptsSaveLicenseToFile
aescriptsValidateLicense
Name
.text
Size
589KB
Virtual Size
588KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
225KB
Virtual Size
224KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
28KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
16KB
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.nv_fatb
Size
227KB
Virtual Size
227KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.nvFatBi
Size
512B
Virtual Size
24B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
848B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=253, version=35403,
count=4, id=259, version=35403,
count=8, id=260, version=35403,
count=31, id=261, version=35403,
count=6, id=257, version=35403,
count=1, id=261, version=35217,
count=16, id=257, version=33145,
count=1, id=260, productName=VS2015 [14.0] build 23026, version=23026,
count=17, id=261, productName=VS2015 [14.0] build 23026, version=23026,
count=3, id=257, productName=VS2019 v16.7.1 build 29111, version=29111,
count=450, id=1, productName=Unmarked objects,
count=1, id=261, version=35730,
count=10, id=265, version=35730,
count=1, id=256, version=35730,
count=1, id=255, version=35730,
count=1, id=151,
count=1, id=258, version=35730,