EMUV61.zip
- SHA256 e04e3bb736667a98cb0d1f26860a92c1cb4e79eff646dadd39185553a54c8e32
Password
Star
Overview
overview
3Static
static
3EMUV61.zip
windows11-21h2-x64
1EMUV61.zip
windows11-ltsc_2024-x64
1EMUV7/EMU.exe
windows11-21h2-x64
1EMUV7/EMU.exe
windows11-ltsc_2024-x64
1EMUV7/inst...on.exe
windows11-21h2-x64
3EMUV7/inst...on.exe
windows11-ltsc_2024-x64
3EMUV7/inte...on.dll
windows11-21h2-x64
1EMUV7/inte...on.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EMUV61.zip
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
EMUV61.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
EMUV7/EMU.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
EMUV7/EMU.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral5
Sample
EMUV7/install-interception.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
EMUV7/install-interception.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral7
Sample
EMUV7/interception.dll
Resource
win11-20260513-en
windows11-21h2-x64
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
EMUV7/interception.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target EMUV61.zip
- Size 8.1MB
- Sample260730-1tpgesgc22
- SHA256 e04e3bb736667a98cb0d1f26860a92c1cb4e79eff646dadd39185553a54c8e32
- MD5 b2aae01fb4af0537c9075623d7910f7e
- SHA1 a7ec7a5e1715117428775a50d5c97bf7cc8c4b1c
- SHA512 26a9f5823ae66fabf0f1576f0f0b11df6b06f8aeddc10f6b754be57abd149b70b5f59535776dade646cedf89aca53a474eefa2e0dec611d9b7b08e4a04f237fa
- SSDEEP 196608:tC/AGiFMYbnc5q+AguYHiaXIlDeLtuiTqyc65FJ85nyu80qDi:bGiJY0+AguYHiaYUoIq4N6nTd8i
- TLSH T1B58633AD34B003AFF770491812E5958E3C1A33C68A7E7F1394F6654A5B3BDC4E9C2169
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 3 IoCs
Checks for missing Authenticode signature.
resource unpack001/EMUV7/EMU.exe unpack001/EMUV7/install-interception.exe unpack001/EMUV7/interception.dll
File Explorer
-
EMUV61.zip.zip 8.1MB
-
EMUV7/EMU.exe.exe 15.8MB
-
EMUV7/configs/COD.json3KB
-
EMUV7/install-interception.exe.exe 459KB
-
EMUV7/interception.dll.dll 11KB
-
EMUV7/macros/autoping.lua100B
-
EMUV7/macros/glider.lua416B
-
EMUV7/macros/jitter.lua632B
-
EMUV7/macros/orbital.lua325B
-
EMUV7/macros/rapid_fire.lua213B
-
EMUV7/macros/slide_cancel.lua420B
-
EMUV7/macros/yy.lua202B
EMUV7/EMU.exe
- IMPHASH 058603717b524dd891bf0c278b426381
- SHA256 b79199faa6b6cf9e28c22f97228ce7f76c5c5869bf02c3b54567916682ff023a
- MD5 e2a8904afb1a1406f287af9089c6242b
- SHA1 3f636d50852e7da1e7bd0bfd91a8599c56eea9b7
- SHA512 0e4a02438486db6382221c66b7db9817cbb65d254a9f593f49a8084a2aa692879d3e8a95c633f282a35982e9055ac9d32f4994f24caf90bee689f3342a347295
- SSDEEP 98304:OaFlUF1ywR+RQQ0R673L2SDKlCnoAYi8wtti1wyZKyQauUN4jiCp/Ei2vjUuR6J8:s2QrKdu4jiCp/h2DRotsuqesaszL0
- TLSH T15EF67D02BE9A58EDD059C87483464BA79E2634CF0A35B9FF46C901292F7EBB45F1C319
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Star
Minor OS version
0
Major OS version
6
Entry point
9714508
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
fake_controller.pdb
bcryptprimitives
ProcessPrng
ntdll
NtWriteFile
NtReadFile
NtCreateFile
NtDeviceIoControlFile
NtQuerySystemInformation
NtQueryInformationProcess
NtCancelIoFileEx
RtlGetVersion
RtlNtStatusToDosError
kernel32
CreateEventW
WaitForSingleObject
GetProcAddress
LoadLibraryExA
GetProcessHeap
HeapFree
HeapAlloc
FormatMessageW
GetTimeZoneInformationForYear
SwitchToThread
HeapReAlloc
GlobalUnlock
GetModuleFileNameA
GetCurrentThread
LoadLibraryExW
GlobalAlloc
SetThreadStackGuarantee
GlobalSize
FreeConsole
GetCurrentThreadId
GetFileInformationByHandleEx
SetThreadErrorMode
GetFileInformationByHandle
GetModuleFileNameW
SetWaitableTimer
GlobalLock
WriteConsoleW
SetLastError
GetConsoleOutputCP
GetConsoleMode
GetStdHandle
ReleaseMutex
CreateMutexA
GetCurrentProcessId
LoadLibraryA
WaitForSingleObjectEx
GetTickCount64
GetLogicalProcessorInformationEx
CreateEventA
GlobalFree
DeviceIoControl
DuplicateHandle
GetSystemInfo
GetOverlappedResult
GetModuleHandleW
GetSystemTimePreciseAsFileTime
FindClose
CreateDirectoryW
DeleteFileW
SetFileInformationByHandle
PostQueuedCompletionStatus
CreateFileMappingW
GetVolumeInformationW
MapViewOfFile
GetDriveTypeW
GetFullPathNameW
GetCurrentProcess
VirtualProtect
UnmapViewOfFile
VirtualQueryEx
OpenProcess
SetFilePointerEx
GlobalMemoryStatusEx
LocalFree
GetWindowsDirectoryW
GetSystemDirectoryW
CreateIoCompletionPort
SetFileCompletionNotificationModes
GetFinalPathNameByHandleW
GetQueuedCompletionStatusEx
Sleep
GetModuleHandleA
CloseHandle
GetLastError
FreeLibrary
GetDiskFreeSpaceExW
GetLogicalDrives
GetProcessIoCounters
GetSystemTimes
GetProcessTimes
GetSystemTimeAsFileTime
ReadFile
CancelIo
GetComputerNameExW
GetExitCodeProcess
WaitForMultipleObjects
SleepEx
WriteFileEx
ReadFileEx
CreateThread
CreateNamedPipeW
GetFileAttributesW
CreateProcessW
CreateFileW
IsProcessorFeaturePresent
TerminateProcess
SetHandleInformation
FindFirstFileExW
FindNextFileW
CreateWaitableTimerExW
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WideCharToMultiByte
AddVectoredExceptionHandler
GetUserPreferredUILanguages
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
GetCurrentDirectoryW
lstrlenW
MultiByteToWideChar
GetEnvironmentVariableW
QueryPerformanceFrequency
CompareStringOrdinal
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
ReadProcessMemory
RemoveVectoredExceptionHandler
FormatMessageA
oleaut32
SafeArrayAccessData
SafeArrayGetLBound
GetErrorInfo
SafeArrayGetUBound
SysFreeString
SafeArrayUnaccessData
SysStringLen
SysAllocStringLen
VariantClear
SysAllocString
api-ms-win-core-winrt-l1-1-0
RoGetActivationFactory
ole32
OleInitialize
CoIncrementMTAUsage
RevokeDragDrop
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
RegisterDragDrop
advapi32
ImpersonateAnonymousToken
RevertToSelf
GetUserNameW
OpenProcessToken
LookupAccountSidW
CopySid
GetTokenInformation
GetLengthSid
IsValidSid
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
user32
GetWindowPlacement
GetMenu
MonitorFromRect
GetCursorPos
GetMonitorInfoW
DefWindowProcA
SetWindowDisplayAffinity
CloseClipboard
ReleaseDC
SendMessageW
GetForegroundWindow
FlashWindowEx
InvalidateRgn
SetWindowPos
SetCursor
LoadCursorW
SetWindowTextW
GetClientRect
RegisterRawInputDevices
IsProcessDPIAware
GetDC
GetSystemMetrics
ValidateRect
DefWindowProcW
RedrawWindow
TranslateMessage
DispatchMessageW
PeekMessageW
MonitorFromPoint
SetWindowLongPtrW
CreateWindowExW
RegisterClassExW
RegisterTouchWindow
GetActiveWindow
SystemParametersInfoA
SetCapture
SetForegroundWindow
GetWindowRect
SetWindowPlacement
TrackPopupMenu
SetMenuDefaultItem
EnableMenuItem
GetSystemMenu
ClientToScreen
PostMessageW
DestroyWindow
ChangeDisplaySettingsExW
MonitorFromWindow
GetWindowLongPtrW
IsIconic
IsWindowVisible
GetTouchInputInfo
CloseTouchInputHandle
TrackMouseEvent
RegisterClassExA
CreateWindowExA
CreateIcon
DestroyIcon
OpenClipboard
GetClipboardData
EmptyClipboard
SetClipboardData
GetKeyboardState
GetAsyncKeyState
RegisterWindowMessageA
GetKeyState
KillTimer
SetTimer
GetMessageW
MapVirtualKeyExW
GetKeyboardLayout
GetRawInputData
ToUnicodeEx
ShowCursor
ClipCursor
GetClipCursor
ReleaseCapture
SendInput
MapVirtualKeyW
AdjustWindowRectEx
ScreenToClient
GetWindowLongW
SetWindowLongW
ShowWindow
api-ms-win-core-synch-l1-2-0
WakeByAddressAll
WakeByAddressSingle
WaitOnAddress
gdi32
DescribePixelFormat
SwapBuffers
SetPixelFormat
CreateRectRgn
CreateCompatibleDC
BitBlt
GetDeviceCaps
ChoosePixelFormat
DeleteObject
DeleteDC
SelectObject
CreateDIBSection
GetPixelFormat
ws2_32
connect
getpeername
WSAGetLastError
getsockname
WSASocketW
shutdown
send
ioctlsocket
getaddrinfo
setsockopt
WSAIoctl
closesocket
getsockopt
WSACleanup
WSAStartup
freeaddrinfo
WSASend
bind
recv
crypt32
CertCloseStore
CertFreeCertificateContext
CertGetCertificateChain
CertDuplicateCertificateContext
CertDuplicateStore
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertOpenStore
CertDuplicateCertificateChain
CertAddCertificateContextToStore
CertEnumCertificatesInStore
secur32
FreeCredentialsHandle
ApplyControlToken
EncryptMessage
AcquireCredentialsHandleA
InitializeSecurityContextW
LsaEnumerateLogonSessions
LsaGetLogonSessionData
LsaFreeReturnBuffer
FreeContextBuffer
QueryContextAttributesW
DecryptMessage
AcceptSecurityContext
DeleteSecurityContext
shell32
DragQueryFileW
DragFinish
CommandLineToArgvW
shlwapi
AssocQueryStringW
imm32
ImmGetContext
ImmAssociateContextEx
ImmReleaseContext
ImmGetCompositionStringW
dwmapi
DwmEnableBlurBehindWindow
psapi
GetPerformanceInfo
GetModuleFileNameExW
pdh
PdhGetFormattedCounterValue
PdhCloseQuery
PdhOpenQueryA
PdhAddEnglishCounterW
PdhCollectQueryData
PdhRemoveCounter
iphlpapi
FreeMibTable
GetIfEntry2
GetIfTable2
GetAdaptersAddresses
netapi32
NetApiBufferFree
NetUserGetInfo
NetUserGetLocalGroups
NetUserEnum
powrprof
CallNtPowerInformation
setupapi
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
d3dcompiler_47
D3DCompile
opengl32
wglGetCurrentContext
wglDeleteContext
wglCreateContext
wglGetProcAddress
wglMakeCurrent
uxtheme
SetWindowTheme
interception
interception_receive
interception_destroy_context
interception_wait_with_timeout
interception_create_context
interception_set_filter
interception_send
interception_is_keyboard
interception_is_mouse
vcruntime140
memcpy
__CxxFrameHandler3
memset
memmove
memcmp
_CxxThrowException
strstr
strchr
memchr
strrchr
longjmp
__C_specific_handler
__intrinsic_setjmp
__current_exception_context
__current_exception
api-ms-win-crt-math-l1-1-0
asin
__setusermatherr
cosh
round
floorf
ceilf
roundf
frexp
log10
ldexp
atan2f
fmodf
sinf
cosf
_hypotf
tanh
log
powf
sinh
floor
trunc
exp2
atan2
sqrt
fmod
pow
ceil
tan
sin
cos
exp2f
truncf
_hypot
acosf
log2f
asinf
tanf
fmaf
exp
acos
log2
api-ms-win-crt-runtime-l1-1-0
_errno
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
_seh_filter_exe
abort
strerror
system
exit
api-ms-win-crt-string-l1-1-0
isalpha
strcmp
isdigit
isalnum
toupper
strspn
isupper
islower
strcpy
strpbrk
isxdigit
isspace
ispunct
strcoll
strncmp
strlen
tolower
iscntrl
wcslen
isgraph
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
realloc
api-ms-win-crt-stdio-l1-1-0
setvbuf
tmpfile
ungetc
_pclose
_ftelli64
__stdio_common_vsprintf
_fseeki64
_popen
__acrt_iob_func
fclose
feof
clearerr
ferror
fflush
fopen
fread
__p__commode
freopen
getc
__stdio_common_vfprintf
tmpnam
fwrite
_set_fmode
api-ms-win-crt-time-l1-1-0
_difftime64
clock
_gmtime64
_localtime64
_mktime64
strftime
_time64
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
setlocale
localeconv
api-ms-win-crt-environment-l1-1-0
getenv
api-ms-win-crt-filesystem-l1-1-0
remove
rename
api-ms-win-crt-convert-l1-1-0
strtod
Name
.text
Size
9.5MB
Virtual Size
9.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
5.8MB
Virtual Size
5.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
12KB
Virtual Size
14KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
389KB
Virtual Size
388KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
102KB
Virtual Size
101KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
50KB
Virtual Size
50KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=2, id=257, version=34918,
count=1, id=253, version=34918,
count=4, id=259, version=34918,
count=10, id=260, version=34918,
count=24, id=261, version=34918,
count=22, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=22, id=257, version=30151,
count=5, id=257, version=33140,
count=30, id=260, version=35207,
count=495, id=1, productName=Unmarked objects,
count=49, productName=Unmarked objects (old),
count=1, id=255, version=35207,
count=1, id=258, version=35207,
EMUV7/configs/COD.json
- SHA256 1bb17040cd5a4a7361962093d62c64136536c0ad01f3099ee66b5e995ac16381
- MD5 94e56ce2c209a64dd46869f41215d4f2
- SHA1 1e35557273c03ff5afb66b3b383c264bfbd40e5c
- SHA512 7b82d22bc975fe9188caf056eb5119924328eff4b7630a6ee6fd2f40769d7c01ca8b97a2ffa8a41e0d0da5d24cf85c148126f0524046c0d646c3ee36ebab6b3f
- TLSH T1FC710C6D098E7CFBED60563A98AB3254342F38B745463C35B1D4CE49EBA261C80D9C2F
- MD5 SHA1 SHA512 TLSH
EMUV7/install-interception.exe
- IMPHASH 51850908103fac568ec032763c0d304c
- SHA256 e137863a79da797f08e7a137280ff2a123809044a888fd75ce9c973198915abe
- MD5 0f0b50d92e030b8965ce669c8058fa6e
- SHA1 257b3f0402285a29f4618b32958c208b3e9d4c4d
- SHA512 fc7c384fd6f682ad01b598abf87c522b38068f4488cea6dc7bd6dedd66e995e4d8fb583c54c6afed0c4c7a9a2318bb6ed257bb3cbd0e48fae83a7819d1167d79
- SSDEEP 6144:+sglhAWORQG8O1dMDmJPjQy4xZWLUKc2:+s4LjGvMk74+B
- TLSH T1AFA45B031F98E96BDB5A077441FB472A6BB5F5E12B2297CF012143692E437D06F3872A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Star
Minor OS version
1
Major OS version
6
Entry point
24908
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
c:\users\franci~1\docume~1\projects\interc~1\instal~1\exe\objfre_wxp_x86\i386\install-interception.pdb
advapi32
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyA
RegCreateKeyA
RegDeleteKeyA
kernel32
GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetLastError
MoveFileExA
GetSystemDirectoryA
GetSystemInfo
CloseHandle
FreeResource
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetVersionExA
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
InterlockedDecrement
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
InterlockedExchange
Sleep
msvcrt
free
_callnewh
malloc
??0bad_cast@@QAE@ABV0@@Z
??1bad_cast@@UAE@XZ
fgetc
fputc
ungetc
fflush
setvbuf
fwrite
fgetpos
fseek
fsetpos
fclose
__iob_func
__crtLCMapStringA
__pctype_func
isupper
___lc_codepage_func
___lc_handle_func
abort
islower
__getmainargs
_cexit
_exit
_XcptFilter
_initterm
_amsg_exit
__setusermatherr
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
__uncaught_exception
memmove
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_controlfp
_errno
__CxxFrameHandler
exit
??0exception@@QAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
memset
memcpy
_stricmp
setlocale
Name
.text
Size
29KB
Virtual Size
28KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
1KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
424KB
Virtual Size
423KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=6, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=69, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=5, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,
count=132, id=1, productName=Unmarked objects,
count=31, id=132, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=126, version=50727,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
EMUV7/interception.dll
- IMPHASH fc13c2509303a1017f557c2e52abb49d
- SHA256 ab88164c11b1b48488772d4c3bfaa4509d5b0ae9dbc5a691dc4f96f0260443c8
- MD5 fe8b2a022297aa36a3546391221f635a
- SHA1 346e04907eb628372f459fbbf109b6cff57cac13
- SHA512 fa203db607cb1154f7ac84e64b236b19ff29abab1b443609648ee3fafa53581c22420edd1f5ed2c522ab7f3c2577c73822eafbf143a8c80914a3061193b10a1c
- SSDEEP 192:wBKz1mGyRWIddjlkuSCqPDKSyFVzhveZhAk3M+j4sreC:EKsGyRhdtlkuSCLS8VcZhP344
- TLSH T14F320856EBBD107DF497D1F89AE61606E9713A00076563CF01709AAC18A3BD6D73B312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
Star
Minor OS version
1
Major OS version
6
Entry point
7940
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
z:\interception-api\library\objfre_win7_amd64\amd64\interception.pdb
msvcrt
__C_specific_handler
_amsg_exit
free
_initterm
malloc
_XcptFilter
sprintf
kernel32
DeviceIoControl
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
CreateFileA
HeapAlloc
HeapFree
GetProcessHeap
CreateEventA
WaitForMultipleObjects
CloseHandle
Sleep
QueryPerformanceCounter
interception_create_context
interception_destroy_context
interception_get_filter
interception_get_hardware_id
interception_get_precedence
interception_is_invalid
interception_is_keyboard
interception_is_mouse
interception_receive
interception_send
interception_set_filter
interception_set_precedence
interception_wait
interception_wait_with_timeout
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
512B
Virtual Size
348B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
928B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
36B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=149, productName=VS2008 SP1 build 30729, version=30729,
count=32, id=1, productName=Unmarked objects,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=11, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=146, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=137, version=30729,
count=1, id=148, productName=VS2008 SP1 [9.0] build 30729, version=30729,
count=1, id=145, productName=VS2008 SP1 build 30729, version=30729,
EMUV7/macros/autoping.lua
- SHA256 43e3ffbb195c4c3e3cd31f0c391931b8f92bb15224750ea70591244e595f9d2e
- MD5 273a52c4a3e0015aeba604305404bd4a
- SHA1 8b153123aa5aece721f527527d24fc97c662c705
- SHA512 ed6a88875b7e74bf33b11fa24958e06bcf95523cce8cb962221927b104cb980cdc787a06319b514af70be0fa4f7ff39c3aadbc4ce2a262556e8f6dd4cab02ed0
- TLSH T16AB092C4144EA097403A492B2CEB3102D4242412212B78A4B08800C02E3AB912648828
- MD5 SHA1 SHA512 TLSH
EMUV7/macros/glider.lua
- SHA256 3ef8a8c1e2506b5346474233dd8f14030aaa007d090e5637e26fc0f64598ec5e
- MD5 fb8caae3a476defae09d6e96bcdbcdba
- SHA1 e4dcf3a9c5fcc78f4972d24a035ad416f4107bb7
- SHA512 ee6e107230c9c2b99b846e9b5bbf109b3ac6e27aff16bf043068b3ee35956165dc9fe0e820674e3c6ca98e46ca4ac1a592dbb841b6ac2993c727f38808326efe
- TLSH T1F1E06D1F10DE6AB750E25C32DF375135EA503AE35252566C3272FA4D2E30D1088ABD1C
- MD5 SHA1 SHA512 TLSH
EMUV7/macros/jitter.lua
- SHA256 16707e3acedcb9d8aecd938ec6fe0402f1a42638f047da702a55b81b24015542
- MD5 01454b087ac1f3ed3444157e89a4a72c
- SHA1 58798cb0c791517f04a16255a08716adfd50b30c
- SHA512 a1f4d2add41924de35f1b5a2ef1f12a1b870db2e090d82ed3cd6295c4f7cba8f587711c2548e53ebe3f6da7ed0fa0e8b180e277800db57c8dc1f43d39945b2c0
- TLSH T13DF09E10271B4191687667B2DC883156FB61040313191E4977F8C148BF3230E818991D
- MD5 SHA1 SHA512 TLSH
EMUV7/macros/orbital.lua
- SHA256 750544cb06994a7973f8c1e0773babda29657e1c8f9a56dd7513ca0306dc296a
- MD5 ce102c23ac6664b681041ab0f62c019b
- SHA1 faa0ce7cdd678bccb53edaa9dde1a63d2c66550f
- SHA512 359d11baf1443725c8ee0bc1949a578b894b3227dd3a78f1e25a43eb0337e024df097de1de89250563ac5710bd774961da6ae5b39bdef31732d699727e527db7
- TLSH T1C6E04F09120B5052B47567725C223294F769A41315EE680E3A6C4784BF3231D46C241E
- MD5 SHA1 SHA512 TLSH
EMUV7/macros/rapid_fire.lua
- SHA256 4edaeae11188da8ec79d96d686581da38ebf669d6f332b31bb8e3b07f0757c24
- MD5 5f10c664a476ed339735a4e12dd56c95
- SHA1 cf64f939433e23b9f5fa5dc92c400049fc6b59b9
- SHA512 5246ef77f7ce2685485c91ac0e3fbc1061bd0e8886f6c99cb23f7c4547224c20ee94209550fbbc8d0c1fc98fd1d016f41e3b64de125f557452a8287f90bf65ed
- TLSH T11CD0221D04030339D02A262328A23242773CB013018A2D5A7D1C92C83F8133EEEE01CB
- MD5 SHA1 SHA512 TLSH
EMUV7/macros/slide_cancel.lua
- SHA256 11e96b1d240f543054e0cf8d57ae5b53b24baa3a3dc11afcd679cf1c36fd2d1a
- MD5 2b542aeeeeda2d872d7a45635f4c2315
- SHA1 d7b279a6e293e3f8aaf7af9a71f91b52992379ed
- SHA512 7e9296b3a41fcb1059aebabb1ff143b29a5c4cfa058cfaee2da3f8ceefb496aeffbee627a91795c48de184c3c5ce3f53588f657060ab7e5b4fd25f6f34c6d467
- TLSH T169E0ED8D144724FF8D768B3B1FFA3259E23A102B513B786034CC05852F7A36619CC83A
- MD5 SHA1 SHA512 TLSH
EMUV7/macros/yy.lua
- SHA256 ab28ecb2d7b1769f642e81f860ca44988d18214694bda4b5fdb27f484f6e70c1
- MD5 1796e364a8e480ba79710e44d220f147
- SHA1 9f491e6e618c3478a1af4ccd405fb158b8ddbbd2
- SHA512 c08143eaa9cb93836b922b432b6b196a37c1bca202a132473fdc9edfd5b1abbd25335f277023b263ae3bf30a593b8cfcae081ae974b37a54028dac2e25dd093a
- TLSH T19FD0C90C1C0EE0AF54734A3F1CFBB217E329151B112B3814B0882C943F7A721449982A
- MD5 SHA1 SHA512 TLSH