Maxey's Visuals version-145f189a6a974303.zip
- SHA256 a19d399f6b88b06fa369d896027b563dc5668241c8d9098516af2858303f8055
Overview
overview
7Static
static
3Maxey's Vi...03.zip
windows10-2004-x64
3Maxey's Vi...03.zip
windows11-ltsc_2024-x64
1FeatureModule.dll
windows10-2004-x64
1FeatureModule.dll
windows11-ltsc_2024-x64
1NewInjector.exe
windows10-2004-x64
5NewInjector.exe
windows11-ltsc_2024-x64
5NunitoSans...ar.ttf
windows10-2004-x64
7NunitoSans...ar.ttf
windows11-ltsc_2024-x64
3eurotrucks2.exe
windows10-2004-x64
6eurotrucks2.exe
windows11-ltsc_2024-x64
6loader.dll
windows10-2004-x64
1loader.dll
windows11-ltsc_2024-x64
1Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Maxey's Visuals version-145f189a6a974303.zip
Resource
win10v2004-20260513-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Maxey's Visuals version-145f189a6a974303.zip
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
FeatureModule.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
FeatureModule.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
NewInjector.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral6
Sample
NewInjector.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral7
Sample
NunitoSans-Regular.ttf
Resource
win10v2004-20260513-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral8
Sample
NunitoSans-Regular.ttf
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
eurotrucks2.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral10
Sample
eurotrucks2.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
Behavioral task
behavioral11
Sample
loader.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral12
Sample
loader.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target Maxey's Visuals version-145f189a6a974303.zip
- Size 7.0MB
- Sample260802-ltdmlagd23
- SHA256 a19d399f6b88b06fa369d896027b563dc5668241c8d9098516af2858303f8055
- MD5 f0fa95490be4d3375110d5622c17f065
- SHA1 cfed818f060a13fc8793867b433fab06c1b44683
- SHA512 1800cbb6dd47b09bfe86eb178d03d6bb71eae6694d75b482c9950e7d48c0a710c17e9b1ae772f5cf4dc6c9858b38c078eda1d349e46dabb101d876c58db60ee6
- SSDEEP 196608:Chc9kMfKETYhENzTOm3o6KXMRtuWASlVrPZ7DD:Cy6y/J4d87udEx/D
- TLSH T18E76339D5ECEF217B62111D1119F3B4C9A32EDE2411D8AF2CF939649C51D2CACCC68AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 4 IoCs
Checks for missing Authenticode signature.
resource unpack001/FeatureModule.dll unpack001/NewInjector.exe unpack001/eurotrucks2.exe unpack001/loader.dll
File Explorer
-
Maxey's Visuals version-145f189a6a974303.zip.zip 7.0MB
-
FeatureModule.dll.dll 26KB
-
NewInjector.exe.exe 3.5MB
-
NunitoSans-Regular.ttf135KB
-
eurotrucks2.exe.exe 3.8MB
-
loader.dll.dll 19KB
FeatureModule.dll
- IMPHASH 267b569b06c3af33416558161fffbc46
- SHA256 b77934ff943bd4ba94a49fb7b04350c13f0eefa34f5a34baacf7bec51f2bef63
- MD5 e90686e0d7aee9f5c52a345661453706
- SHA1 5b2971e413d5421bc9fbd9d103e5d160b5f89562
- SHA512 c7163916708d367de6c8c4d9f7684fc1c03475680b0ad4c7250f8683285478af91603f43f86f4b2eb68b0d2fc41eee34ae43b8b56ea97ca5b937e28a9e97ab02
- SSDEEP 384:EkIqeySVyRJDTEoIqVPGwxqgrsJ/RuZoijtBKYkOlCtNRuZoijtBKYkOQnfhkZj8:Bey5RJDQoIqZlxd/B6Io
- TLSH T114C2422ADC27E12BD35D8CB4C9134C15ED12ACD6DBE5B5CBA7410CE60865FE8AB3D201
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8272
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\hecke\OneDrive\Desktop\needed files\repos\Roblox-DLL\x64\Release\Roblox-DLL.pdb
kernel32
OutputDebugStringA
CloseHandle
CreateNamedPipeA
GetLastError
Sleep
ConnectNamedPipe
WriteFile
DisconnectNamedPipe
GetModuleHandleA
IsBadReadPtr
VirtualProtect
DisableThreadLibraryCalls
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
msvcp140
_Cnd_do_broadcast_at_thread_exit
_Mtx_unlock
?_Throw_Cpp_error@std@@YAXH@Z
_Thrd_detach
_Mtx_lock
vcruntime140_1
__CxxFrameHandler4
vcruntime140
_CxxThrowException
__std_exception_destroy
memcpy
__std_type_info_destroy_list
__C_specific_handler
__std_exception_copy
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
api-ms-win-crt-runtime-l1-1-0
_beginthreadex
terminate
_initterm_e
_seh_filter_dll
_cexit
_initterm
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
run
Name
.text
Size
7KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
15KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
640B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
660B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
472B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=3, id=259, version=35721,
count=8, id=260, version=35721,
count=21, id=261, version=35721,
count=6, id=257, version=35721,
count=5, id=257, version=33145,
count=101, id=1, productName=Unmarked objects,
count=2, id=265, version=36248,
count=1, id=256, version=36248,
count=1, id=255, version=36248,
count=1, id=258, version=36248,
NewInjector.exe
- IMPHASH 78c4cea1e4afd51dc880ecf44ba97884
- SHA256 98bcbf591d88ebe120d8a79a7f16f6773acbe9f499047f38ee3bbe3e6fc3419a
- MD5 44656f6b25ceef4765c57bdbb027a8f6
- SHA1 fb054cfcc1a568e01f1cfcff482642a861f7235e
- SHA512 8c918d3be12c7fdd05e8a370dd5d43a8d5ed1375391bf07a3c3b96f29f9d4868be645725fca43002f24a43131a196385c63050db831d1d3feaa5c58a452af4dd
- SSDEEP 98304:PWuK307hCUdXDKPgHpL+8zXX/63f+B4PRm:pKdURDdpR/k+0
- TLSH T106F523FA69DA2DFAD003CBB0514B326DB46B7F8207A54D8B37DA29434E171199CB5F02
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2494796
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
OpenProcess
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
advapi32
AdjustTokenPrivileges
msvcp140
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
api-ms-win-crt-stdio-l1-1-0
fread
api-ms-win-crt-heap-l1-1-0
_callnewh
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
api-ms-win-crt-string-l1-1-0
_stricmp
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
__setusermatherr
Name
.text
Size
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.`|9
Size
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.l<V
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.[,R
Size
3.4MB
Virtual Size
3.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
NunitoSans-Regular.ttf
- SHA256 e2e28393b77e81bfac576c294de53b52b9b163e632ae8a8b92325e270dfcae4a
- MD5 05f376c99895ad997a49c579d385d589
- SHA1 ca3f0c571f343961d9d333d53926262f1e243398
- SHA512 aa3ed4508f8f6a8fb7418a8dfb3d419c2fb92b170c6b5c889d7c138e3fc160455c4bc1fdc47d0716fd194acbe6721c058fc102b8f045a4844d66fc80761f59e4
- SSDEEP 1536:G8zCxfahif9ZnrNPtN7X7t13OK6kl/UAe8ulK6kl/UAe8zDXyd0o3/JylwHTGemj:9AVv/ty1JJHTG91jGBkqVPXi
- TLSH T1D8D32913B703A35AED062E798BB2D3E4A3B1FD512F66CB0FF8462E5DD85B1C40992641
- MD5 SHA1 SHA512 SSDEEP TLSH
eurotrucks2.exe
- IMPHASH 47636a586a8a6087b847217769e23944
- SHA256 5ccff9e533fad2e76fad8f4a6088efe0cf20b477390cf6123703dec5b06c9a0a
- MD5 bf50488174a81dc8a618a1afa2bffba5
- SHA1 cd3a08cd4ce50ac53eca0195f2364566cfddc8e8
- SHA512 4ba30a846bee2b0ce3f73df776f97987133a460493d6120b8cbc404a7e28870a3f9cb5171240cad9e0be649a9f374c01f5ff631ee63d0e99945ebb7177932dea
- SSDEEP 98304:Er3czigDMim1LE3vUx9qz5Pjmcz26aOx5mZO3qaz1dlwC43vncfb:MczigDaI/UjqzdJ66ldjsC43g
- TLSH T17606238878CA23FAD25BCB70494178ADBC193BC8FC928C0A76CD19508D177957E7D39A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4976614
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
IsDBCSLeadByte
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
FindWindowW
shell32
ShellExecuteW
imm32
ImmGetContext
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
d3d11
D3D11CreateDeviceAndSwapChain
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__C_specific_handler
api-ms-win-crt-stdio-l1-1-0
__p__commode
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
_callnewh
api-ms-win-crt-convert-l1-1-0
wcstombs
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
api-ms-win-crt-math-l1-1-0
pow
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-string-l1-1-0
strcmp
Name
.text
Size
Virtual Size
395KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
91KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
16KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.Slh
Size
Virtual Size
2.2MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.UwR
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.qya
Size
3.7MB
Virtual Size
3.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
673B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
loader.dll
- IMPHASH 8652aed36ed08761c03c7bc60f847940
- SHA256 703159a8f47bec4bf6c53066b31b1e153405e93754062ed9ea5af5ea0ed51b9d
- MD5 a86ef5b3dd5bc9ca386251dbda11ec60
- SHA1 26ca12a145088a4b0e29b80d0a134d5d0b043fb4
- SHA512 a088633af8acb9ee024e3cd98d75fb3ff1c3436985d80ea62cacfb235f132146c2f84fd6d7a459c46b8ffc1b80849e60f0490d86cfbc6cc3ba528513dee6a6c0
- SSDEEP 384:eF8M0lAMxJSZ+d/UCrZzzi5DlFm+xiEqpnm:e6fuMxJXOCdzzi5iEqpm
- TLSH T1DB92299AF32108B5EA37C278CA33C4268563B1076B3357DF7BA9421D0D72BD42A39A55
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8720
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\hibro\Downloads\Injector (1)\Injector\rbxdriver\Build\Module.pdb
kernel32
ReadFile
TlsSetValue
HeapFree
WriteFile
OutputDebugStringA
LoadLibraryExA
CreateFileW
GetFileAttributesW
GetCurrentThreadId
GetModuleHandleA
Sleep
GetLastError
LoadLibraryA
TlsAlloc
DeleteFileW
CloseHandle
HeapAlloc
GetProcAddress
GetFileSize
GetCurrentProcessId
GetProcessHeap
QueryPerformanceCounter
InitializeSListHead
GetSystemTimeAsFileTime
msvcp140
_Thrd_detach
_Cnd_do_broadcast_at_thread_exit
?_Throw_Cpp_error@std@@YAXH@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_type_info_destroy_list
memset
__std_exception_copy
__std_exception_destroy
__C_specific_handler
memcpy
_CxxThrowException
api-ms-win-crt-stdio-l1-1-0
fflush
_wfopen_s
__stdio_common_vfprintf
fclose
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_seh_filter_dll
_initterm
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit
terminate
_configure_narrow_argv
_beginthreadex
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
api-ms-win-crt-string-l1-1-0
strcmp
Name
.text
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
512B
Virtual Size
504B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
1024B
Virtual Size
624B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
248B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
84B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=8, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=2, id=259, version=35403,
count=7, id=260, version=35403,
count=15, id=261, version=35403,
count=6, id=257, version=35403,
count=5, id=257, version=33145,
count=65, id=1, productName=Unmarked objects,
count=1, id=265, version=35728,
count=1, id=255, version=35728,
count=1, id=258, version=35728,