ParzPainter_v1[.]5 (2)_[unknowncheats[.]me]_[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
ParzPainter_v1.5 (2)_[unknowncheats.me]_.zip
Size 1.4MB
Sample260812-pmxzface78
SHA256 3f8227734bafbec4be44b550969a2bcf656fe34f5b34d304720d05b5425bc10a
MD5 38bc67979ff9dd6137492ad3394ddbb8
SHA1 1ec875ec96cd001bc87a7fa49c1401d7d2bac522
SHA512 4a8693cd6ec004e819bb79d0f5e683b94f6d16fa0219fa3799983b848e0ddf1c8ef6fe75f21b995d6fe8ae6f440bcb8530409d83325a5028b57ccfa0fec84101
SSDEEP 24576:ZgRRLux9Qqcesi5Wb8e93DSR/gBYHwl9/axjnDnf/nKiAKYRuJ7VbFG8hAT:IuY3e0bF3D3Am/axjDn3n1AyrzhK
TLSH
T1A265333025C041C9D2CEA9186ACBC9717F9DBD240F6F3D3D49BEF92922C6805C721AB5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/ParzPainter_v1.5/ParzPainter.dll
unpack001/ParzPainter_v1.5/ParzPainter.exe

File Explorer

ParzPainter_v1.5 (2)_[unknowncheats.me]_.zip

.zip 1.4MB
ParzPainter_v1.5/ParzPainter.dll

.dll 2.4MB
ParzPainter_v1.5/ParzPainter.exe

.exe 153KB
ParzPainter_v1.5/README.txt

2KB

ParzPainter_v1.5 (2)_[unknowncheats.me]_.zip

SHA256 3f8227734bafbec4be44b550969a2bcf656fe34f5b34d304720d05b5425bc10a
MD5 38bc67979ff9dd6137492ad3394ddbb8
SHA1 1ec875ec96cd001bc87a7fa49c1401d7d2bac522
SHA512 4a8693cd6ec004e819bb79d0f5e683b94f6d16fa0219fa3799983b848e0ddf1c8ef6fe75f21b995d6fe8ae6f440bcb8530409d83325a5028b57ccfa0fec84101
SSDEEP 24576:ZgRRLux9Qqcesi5Wb8e93DSR/gBYHwl9/axjnDnf/nKiAKYRuJ7VbFG8hAT:IuY3e0bF3D3Am/axjDn3n1AyrzhK
TLSH
T1A265333025C041C9D2CEA9186ACBC9717F9DBD240F6F3D3D49BEF92922C6805C721AB5
MD5 SHA1 SHA512 SSDEEP TLSH

ParzPainter_v1.5/ParzPainter.dll

IMPHASH 0ecd21aa171a7ed5fbf3a2995494bbed
SHA256 b969b2ec9d7ae66cbe1d13bc07a32d533a6c15bdd5388ef632d81538dc8ba952
MD5 8cf33731f9ba7f1f1987aa95717f289d
SHA1 ca29e8f9ed43996c13127d87dda0ecf0cc39a49f
SHA512 a4cd2dca71a573ee51e65c0a7f34d0bbfb1ee09274e53ade7672a1011b6f7a571f305b8b15bb2c9fe24455b37f45716f68e94548d779c19c33e98efa1dda8fac
SSDEEP 49152:qmv4/blwtBWtHbSHhNvqkKZon5ztEyBtfet71J9wWQnZdFIIvnx:D4DHbfon0yBtG9Q
TLSH
T18CC5BF5A726401A4E067A13DC68B9B07EA713859032197CB13E846EE2FD77F11B7F362
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

830120

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\User\Downloads\chameleonEsp-main\chameleonEsp\x64\Release\chameleonEsp.pdb

kernel32

WaitForSingleObject GetModuleHandleA CreateEventW LoadLibraryA CloseHandle GetProcAddress QueryPerformanceFrequency VerSetConditionMask FreeLibrary QueryPerformanceCounter GetModuleFileNameA GetCurrentProcess FreeLibraryAndExitThread GetCurrentThreadId Sleep DisableThreadLibraryCalls FreeConsole CreateThread GetCurrentProcessId AllocConsole VirtualFree VirtualAlloc GetSystemInfo HeapCreate VirtualProtect HeapFree Thread32Next Thread32First SuspendThread ResumeThread CreateToolhelp32Snapshot GetLastError HeapReAlloc HeapAlloc HeapDestroy GetThreadContext GetModuleHandleW FlushInstructionCache GlobalUnlock OpenThread OutputDebugStringW WriteConsoleW SetEndOfFile HeapSize CreateFileW SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW GetTimeZoneInformation SetConsoleCtrlHandler CreateDirectoryW FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc GetTempPathW GetFileSizeEx GetConsoleOutputCP GlobalLock GlobalFree GlobalAlloc MultiByteToWideChar VirtualQuery WideCharToMultiByte GetTickCount64 FindClose FindFirstFileA FindNextFileA SetThreadContext WriteFile GetFileType GetStdHandle ReadConsoleW FormatMessageA EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LocalFree GetLocaleInfoEx LCMapStringEx GetStringTypeW CompareStringEx GetCPInfo ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader RaiseException InterlockedPushEntrySList InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ReadFile ExitProcess GetModuleHandleExW GetModuleFileNameW SetFilePointerEx GetCurrentThread GetConsoleMode RtlUnwind

user32

SetClipboardData GetClipboardData EmptyClipboard GetWindowThreadProcessId CallWindowProcW GetWindowRect SetWindowLongPtrW GetWindowLongPtrW GetAsyncKeyState DestroyWindow DefWindowProcA CreateWindowExA UnregisterClassA RegisterClassExA GetKeyState GetDC MonitorFromWindow ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetForegroundWindow LoadCursorW SetCapture SetCursor GetClientRect SetProcessDPIAware IsWindowUnicode ReleaseCapture SetCursorPos ReleaseDC GetCursorPos OpenClipboard CloseClipboard

gdi32

CreateRectRgn GetDeviceCaps DeleteObject

imm32

ImmReleaseContext ImmGetContext ImmSetCandidateWindow ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

dwmapi

DwmGetColorizationColor DwmIsCompositionEnabled DwmEnableBlurBehindWindow

ParzPainter_v1.5/ParzPainter.exe

IMPHASH 882522e003efd29f96ed22d409919e27
SHA256 5ee6f70acdc3f8a9b7c40be0667a1f36badbc20ea9d5892aba9fd90df24c7610
MD5 7a921d7e9a79f0d09926d61fc2a13d97
SHA1 cf859d5a1d9903ac3895d03ff7cd54f9856265d6
SHA512 57b624ff69a204cc568a1badf7cb107c05967c284c90a324244a66af7c4605f52bedf2912770e5841831273bc60eab54b98dca08d493de3b5161931b40fc2c8a
SSDEEP 3072:bOJZM1xEghN6O2hAISbbKhn1s8KfqeGADQ:uZM1xESNQHSbKh1K
TLSH
T1D5E36D57B3E531F9E1A7823888910602E7B3B87607709B9F07E447766F236909D3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8092

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetFileAttributesW CloseHandle GetLastError WaitForSingleObject CreateRemoteThread OpenProcess VirtualAllocEx WriteProcessMemory GetModuleFileNameW GetModuleHandleW GetProcAddress CreateToolhelp32Snapshot Process32FirstW Process32NextW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW WriteConsoleW RtlPcToFileHeader RaiseException RtlUnwindEx SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetStdHandle GetStringTypeW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadFile ReadConsoleW HeapSize HeapReAlloc CreateFileW RtlUnwind

ParzPainter_v1.5 (2)_[unknowncheats.me]_.zip

ParzPainter_v1.5/ParzPainter.dll

kernel32

user32

gdi32

imm32

d3dcompiler_47

dwmapi

generic

ParzPainter_v1.5/ParzPainter.exe

kernel32

generic

ParzPainter_v1.5/README.txt