GameSence 2.0.rar
- SHA256 7233fc475a052956ebd0b932b52b3fd7847de18b1026e845f41b9ca2c91246a4
Password
GS-255A22BB-90D2C5F3-25EA73B4
Overview
overview
5Static
static
5GameSence ....0.dll
windows10-2004-x64
1GameSence ....0.dll
windows11-ltsc_2024-x64
1GameSence ...ct.dll
windows10-2004-x64
1GameSence ...ct.dll
windows11-ltsc_2024-x64
1GameSence ...or.exe
windows10-2004-x64
1GameSence ...or.exe
windows11-ltsc_2024-x64
1GameSence ...ct.dll
windows10-2004-x64
3GameSence ...ct.dll
windows11-ltsc_2024-x64
3GameSence ...or.exe
windows10-2004-x64
3GameSence ...or.exe
windows11-ltsc_2024-x64
3Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
GameSence 2.0/GameSence 2.0.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
GameSence 2.0/GameSence 2.0.dll
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
GameSence 2.0/MInjector.v1.2/x64/MInject.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
GameSence 2.0/MInjector.v1.2/x64/MInject.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
GameSence 2.0/MInjector.v1.2/x64/MInjector.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral6
Sample
GameSence 2.0/MInjector.v1.2/x64/MInjector.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
Behavioral task
behavioral7
Sample
GameSence 2.0/MInjector.v1.2/x86/MInject.dll
Resource
win10v2004-20260513-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral8
Sample
GameSence 2.0/MInjector.v1.2/x86/MInject.dll
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
4 signatures
150 seconds
Behavioral task
behavioral9
Sample
GameSence 2.0/MInjector.v1.2/x86/MInjector.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral10
Sample
GameSence 2.0/MInjector.v1.2/x86/MInjector.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target GameSence 2.0.rar
- Size 2.3MB
- Sample260825-fr9dlaxamd
- SHA256 7233fc475a052956ebd0b932b52b3fd7847de18b1026e845f41b9ca2c91246a4
- MD5 3dde7ad62e556302682fa641f721f191
- SHA1 2c824a1c580f48a0d8614594ca28633a23e5b8a2
- SHA512 411215add6096a62ce0c0fd5860909c048d7b38a73feeca86e7389d72005b1ddce9340c858d3cba2ace1ebfa13e2acec4a7c28d5dccbfc08809191c644715210
- SSDEEP 49152:gp+QS8VzXLGCTX5L6F+J0bxvSzagKWNj/LP2USb589Mbq:gpTS8VziCTX5NKlSN7XpSb50Mbq
- TLSH T1BFB5339E40CCA8748EF194B0B94D44AA1BD0A655CB58CDCCFC919FF5BED62042719BBC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- ConfuserEx .NET packer 1 IoCs
Detects ConfuserEx .NET packer.
resource yara_rule static1/unpack001/GameSence 2.0/GameSence 2.0.dll ConfuserEx - Unsigned PE 5 IoCs
Checks for missing Authenticode signature.
resource unpack001/GameSence 2.0/GameSence 2.0.dll unpack001/GameSence 2.0/MInjector.v1.2/x64/MInject.dll unpack001/GameSence 2.0/MInjector.v1.2/x64/MInjector.exe unpack001/GameSence 2.0/MInjector.v1.2/x86/MInject.dll unpack001/GameSence 2.0/MInjector.v1.2/x86/MInjector.exe
File Explorer
-
GameSence 2.0.rar.rar 2.3MB
-
GameSence 2.0/GameSence 2.0.dll.dll 1.8MB
-
GameSence 2.0/MInjector.v1.2/x64/MInject.dll.dll 1.1MB
-
GameSence 2.0/MInjector.v1.2/x64/MInjector.exe.exe 76KB
-
GameSence 2.0/MInjector.v1.2/x86/MInject.dll.dll 788KB
-
GameSence 2.0/MInjector.v1.2/x86/MInjector.exe.exe 77KB
-
GameSence 2.0/Новый текстовый документ.txt326B
GameSence 2.0/GameSence 2.0.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 25e345d22ce05465f2f397def0f7acb2795618de26c993f2c03c7274835a32e3
- MD5 0f55a341a3a9e870ed962f6968a58fe6
- SHA1 37be2b8cf19741f4d1ea8b7504346de2ce663cd8
- SHA512 c996dcaee8fc28f4b2f3e6ec8030a4b76c9a69c139534900de798c31a3ca20e5b1c6d9cfcb4f169a7cfe6a5d7151c8d47ae429bb07861a1974ed2e979a19dd06
- SSDEEP 49152:KzjKsWbFvnonnmdVQxKZVasYpT8fljzD8OJ4JpRRfAe:KnBWbemQx0SpQflPoY4rRR
- TLSH T1FC95335DB38DE4A6F2BDC3BFC43935836631F3925650D3C9988422794A23FD2A9046DB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.
-
Unsigned PE
Checks for missing Authenticode signature.
Password
GS-255A22BB-90D2C5F3-25EA73B4
Minor OS version
0
Major OS version
4
Entry point
1899230
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
960B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
GameSence 2.0/MInjector.v1.2/x64/MInject.dll
- IMPHASH e811452a6cdca317d0b3c4a5757394bc
- SHA256 53364b438b0195caf6f0caa8e46bb5b7d59ea9acddb91a061051203d2fe10db2
- MD5 28a233903524bef9b6336e42d5d45766
- SHA1 91f4370b6046c6d61c6c6c02d0835c72fa070778
- SHA512 2d44ae5ea8052b062a9cdfac4726320dfd3adf7c9890290ae5e915b11eb6fc6f6b3e155cc00024fc78878ad5b7549736293b0ac56d2bb35f7b9db94d8a495d87
- SSDEEP 24576:YFe0slRPBtq2PWSe5jtLM2C1ym5zSIlqiWVgrweSzWR268L5IFS+DcT4WUNy9Ny6:YFbGPXq9jtLM9L5zSjiWVgrweSzWR26c
- TLSH T188455B7A7EB684B2D676857EC6DB8E47D376F4002B6693CB0191521E0FA7BC8813D312
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
GS-255A22BB-90D2C5F3-25EA73B4
Minor OS version
0
Major OS version
6
Entry point
616013
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Nicolas\source\repos\MInjector\x64\Release\MInject.pdb
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Random_device@std@@YAIXZ
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
kernel32
GetCurrentProcess
LeaveCriticalSection
InitializeCriticalSection
GetSystemInfo
VirtualAllocEx
VirtualFreeEx
DeviceIoControl
CreateFileW
CloseHandle
ReadFile
CreateNamedPipeW
TerminateThread
CreateThread
GetCurrentProcessId
ConnectNamedPipe
WriteProcessMemory
GetNativeSystemInfo
VirtualProtectEx
GetThreadContext
ReadProcessMemory
CreateRemoteThread
SetThreadContext
IsWow64Process
VirtualQueryEx
GetModuleFileNameW
GetFileAttributesW
MultiByteToWideChar
FormatMessageW
LocalFree
GetModuleHandleW
WideCharToMultiByte
CreateActCtxW
WriteFile
GetTempPathW
UnmapViewOfFile
DeleteFileW
GetTempFileNameW
CreateFileMappingW
ReleaseActCtx
MapViewOfFile
GetCurrentThread
GetProcAddress
ActivateActCtx
GetEnvironmentVariableW
GetSystemDirectoryW
EnterCriticalSection
CreateToolhelp32Snapshot
GetSystemWow64DirectoryW
Module32FirstW
GetCurrentDirectoryW
GetWindowsDirectoryW
WaitForSingleObject
DuplicateHandle
Sleep
ResetEvent
GetTickCount
LoadLibraryW
FreeLibrary
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
GetExitCodeThread
GetThreadTimes
OpenThread
VirtualFree
VirtualAlloc
SetEvent
WaitForSingleObjectEx
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
WaitForDebugEvent
DebugActiveProcessStop
GetProcessId
CheckRemoteDebuggerPresent
DebugSetProcessKillOnExit
DeleteCriticalSection
RaiseException
GetLastError
DecodePointer
InitializeCriticalSectionEx
OpenProcess
GetExitCodeProcess
CreateProcessW
Process32FirstW
DeactivateActCtx
OutputDebugStringW
DebugActiveProcess
ContinueDebugEvent
Process32NextW
user32
UnregisterClassW
wsprintfW
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumValueW
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
OpenThreadToken
RegCloseKey
RegSetValueExW
RegCreateKeyW
RegOpenKeyW
ole32
CoCreateInstance
CoUninitialize
CoInitialize
shlwapi
SHDeleteKeyW
vcruntime140
_CxxThrowException
memset
__std_type_info_destroy_list
__vcrt_InitializeCriticalSectionEx
memcmp
__C_specific_handler
memchr
__FrameUnwindFilter
memmove
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
__std_terminate
memcpy
_purecall
__CxxQueryExceptionSize
__CxxExceptionFilter
api-ms-win-crt-heap-l1-1-0
_callnewh
malloc
realloc
_recalloc
free
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_register_onexit_function
_execute_onexit_table
_initterm_e
_initterm
_crt_at_quick_exit
abort
terminate
_errno
_invalid_parameter_noinfo_noreturn
_invalid_parameter_noinfo
_seh_filter_dll
_crt_atexit
_initialize_onexit_table
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vswprintf_s
api-ms-win-crt-string-l1-1-0
towlower
wcscpy_s
_wcsicmp
_stricmp
wcstok_s
api-ms-win-crt-convert-l1-1-0
atoi
oleaut32
SysStringByteLen
SysAllocStringByteLen
VariantCopy
mscoree
_CorDllMain
??0Assembler@asmjit@@QEAA@PEAURuntime@1@@Z
??0CodeGen@asmjit@@QEAA@PEAURuntime@1@@Z
??0HostRuntime@asmjit@@QEAA@XZ
??0JitRuntime@asmjit@@QEAA@XZ
??0Runtime@asmjit@@QEAA@XZ
??0StaticRuntime@asmjit@@QEAA@PEAX_K@Z
??0VMemMgr@asmjit@@QEAA@PEAX@Z
??0X86Assembler@asmjit@@QEAA@PEAURuntime@1@I@Z
??0Zone@asmjit@@QEAA@_K@Z
??1Assembler@asmjit@@UEAA@XZ
??1CodeGen@asmjit@@UEAA@XZ
??1HostRuntime@asmjit@@UEAA@XZ
??1JitRuntime@asmjit@@UEAA@XZ
??1Runtime@asmjit@@UEAA@XZ
??1StaticRuntime@asmjit@@UEAA@XZ
??1VMemMgr@asmjit@@QEAA@XZ
??1X86Assembler@asmjit@@UEAA@XZ
??1Zone@asmjit@@QEAA@XZ
??_FVMemMgr@asmjit@@QEAAXXZ
?_alloc@Zone@asmjit@@QEAAPEAX_K@Z
?_emit@X86Assembler@asmjit@@UEAAIIAEBUOperand@2@000@Z
?_grow@Assembler@asmjit@@QEAAI_K@Z
?_grow@PodVectorBase@asmjit@@IEAAI_K0@Z
?_newLabel@Assembler@asmjit@@QEAAIPEAULabel@2@@Z
?_newLabelLink@Assembler@asmjit@@QEAAPEAULabelLink@2@XZ
?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B
?_registerIndexedLabels@Assembler@asmjit@@QEAAI_K@Z
?_relocCode@X86Assembler@asmjit@@UEBA_KPEAX_K@Z
?_reserve@Assembler@asmjit@@QEAAI_K@Z
?_reserve@PodVectorBase@asmjit@@IEAAI_K0@Z
?_x86CondToCmovcc@asmjit@@3QBIB
?_x86CondToJcc@asmjit@@3QBIB
?_x86CondToSetcc@asmjit@@3QBIB
?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B
?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B
?_x86ReverseCond@asmjit@@3QBIB
?add@JitRuntime@asmjit@@UEAAIPEAPEAXPEAUAssembler@2@@Z
?add@StaticRuntime@asmjit@@UEAAIPEAPEAXPEAUAssembler@2@@Z
?align@X86Assembler@asmjit@@UEAAIII@Z
?alloc@VMemMgr@asmjit@@QEAAPEAX_KI@Z
?alloc@VMemUtil@asmjit@@SAPEAX_KPEA_KI@Z
?allocProcessMemory@VMemUtil@asmjit@@SAPEAXPEAX_KPEA_KI@Z
?allocZeroed@Zone@asmjit@@QEAAPEAX_K@Z
?bind@Assembler@asmjit@@UEAAIAEBULabel@2@@Z
?callCpuId@X86CpuUtil@asmjit@@SAXIIPEATX86CpuId@2@@Z
?detect@X86CpuUtil@asmjit@@SAXPEAUX86CpuInfo@2@@Z
?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ
?dup@Zone@asmjit@@QEAAPEAXPEBX_K@Z
?embed@Assembler@asmjit@@UEAAIPEBXI@Z
?embedLabel@X86Assembler@asmjit@@QEAAIAEBULabel@2@@Z
?emit@Assembler@asmjit@@QEAAII@Z
?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00@Z
?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00H@Z
?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@00_K@Z
?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0@Z
?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0H@Z
?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@0_K@Z
?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@@Z
?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@H@Z
?emit@Assembler@asmjit@@QEAAIIAEBUOperand@2@_K@Z
?emit@Assembler@asmjit@@QEAAIIH@Z
?emit@Assembler@asmjit@@QEAAII_K@Z
?flush@HostRuntime@asmjit@@UEAAXPEAX_K@Z
?getCpuInfo@HostRuntime@asmjit@@UEAAPEBUCpuInfo@2@XZ
?getHost@CpuInfo@asmjit@@SAPEBU12@XZ
?getPageGranularity@VMemUtil@asmjit@@SA_KXZ
?getPageSize@VMemUtil@asmjit@@SA_KXZ
?getStackAlignment@HostRuntime@asmjit@@UEAAIXZ
?make@Assembler@asmjit@@UEAAPEAXXZ
?noOperand@asmjit@@3UOperand@1@B
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KAEBUX86Reg@2@IHI@Z
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z
?release@JitRuntime@asmjit@@UEAAIPEAX@Z
?release@StaticRuntime@asmjit@@UEAAIPEAX@Z
?release@VMemMgr@asmjit@@QEAAIPEAX@Z
?release@VMemUtil@asmjit@@SAIPEAX_K@Z
?releaseProcessMemory@VMemUtil@asmjit@@SAIPEAX0_K@Z
?relocCode@Assembler@asmjit@@QEBA_KPEAX_K@Z
?reset@Assembler@asmjit@@QEAAX_N@Z
?reset@PodVectorBase@asmjit@@QEAAX_N@Z
?reset@VMemMgr@asmjit@@QEAAXXZ
?reset@Zone@asmjit@@QEAAX_N@Z
?sdup@Zone@asmjit@@QEAAPEADPEBD@Z
?setArch@X86Assembler@asmjit@@QEAAII@Z
?setError@CodeGen@asmjit@@QEAAIIPEBD@Z
?setErrorHandler@CodeGen@asmjit@@QEAAIPEAUErrorHandler@2@@Z
?sformat@Zone@asmjit@@QEAAPEADPEBDZZ
?shrink@VMemMgr@asmjit@@QEAAIPEAX_K@Z
?x86RegData@asmjit@@3UX86RegData@1@B
Name
.text
Size
615KB
Virtual Size
615KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.nep
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
474KB
Virtual Size
474KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
17KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
34KB
Virtual Size
33KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=12, id=257, version=24610,
count=5, id=257, version=25305,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=180, id=1, productName=Unmarked objects,
count=4, id=259, version=25305,
count=29, id=261, version=25305,
count=11, id=260, version=25305,
count=42, id=265, version=25547,
count=4, id=261, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
GameSence 2.0/MInjector.v1.2/x64/MInjector.exe
- SHA256 160f57e4c05193e7c10d22f0844793957020357815af0e7da1391af642ca8e55
- MD5 249de1375157ebcd0c2cf606ddb3fe9e
- SHA1 92a704fa36b43e76376f568cbf7769fd757af932
- SHA512 3714d2b96ada7ec887743bc94d92cf7403376cc4e463153f27bd1bfcbd04e7a6f227ef04a7a4135d47b3e7f609e4dc9271f33fec0d6556a6c75a36c7528dfade
- SSDEEP 1536:R9RWDwaRXQ/420MpZwpcPsaeXK7420MpZwpc6:lW9Q/4M3EK74M36
- TLSH T13973B2B73D786026D03002FEACD397FE4AA16E7B501CDA9579A4FF8A7E4063C0916947
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
GS-255A22BB-90D2C5F3-25EA73B4
Minor OS version
0
Major OS version
4
Entry point
%!f(<nil>)
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\Nicolas\source\repos\MInjector\MInjector\obj\x64\Release\MInjector.pdb
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
GameSence 2.0/MInjector.v1.2/x86/MInject.dll
- IMPHASH af0f896da206ccbbee8a14b57e3d5259
- SHA256 b9e25c9b39e70ab1cb044b83bf6b744d367955907b860e4c4bb4ea86d1bde319
- MD5 25e665dd4dadd3f7401f2867087cdcde
- SHA1 91883b85aa648db900274c7d9c3a5be846c0bd0c
- SHA512 0c0682a6565727c86acb50dd3d84ffbef9a4fbc5366f1589fee81b1ead981687ea70326398a32bf26a1571392ec9aa7b2fc301e855bf6eadf7034be44a41fcc4
- SSDEEP 24576:a8Vj+bdAXgC95b7FOULiGVgReeSzWRm68Ln3J:fVj+b09XOULiGVgReeSzWRm68L3J
- TLSH T16F059D6075C54576FFC902B788BEBE3817AC9544033483C7B7882D5A9AB5BE30B32697
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
GS-255A22BB-90D2C5F3-25EA73B4
Minor OS version
0
Major OS version
6
Entry point
510237
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB paths
C:\Users\Nicolas\source\repos\MInjector\build\Win32\Release\MInject.pdb
msvcp140
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?_Random_device@std@@YAIXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?__ExceptionPtrDestroy@@YAXPAX@Z
kernel32
CreateNamedPipeW
InitializeCriticalSection
TerminateThread
CloseHandle
CreateThread
GetCurrentProcessId
ConnectNamedPipe
EnterCriticalSection
LeaveCriticalSection
Thread32Next
Thread32First
GetCurrentThreadId
CreateToolhelp32Snapshot
GetCurrentProcess
WaitForSingleObject
DuplicateHandle
Sleep
ResetEvent
LocalFree
GetTickCount
VirtualFree
VirtualAlloc
TerminateProcess
ResumeThread
Process32NextW
Process32FirstW
CreateProcessW
GetExitCodeProcess
GetSystemInfo
VirtualAllocEx
VirtualFreeEx
GetModuleFileNameW
GetFileAttributesW
MultiByteToWideChar
FormatMessageW
GetModuleHandleW
WideCharToMultiByte
DeviceIoControl
CreateFileW
WriteProcessMemory
GetNativeSystemInfo
VirtualProtectEx
GetThreadContext
ReadProcessMemory
CreateRemoteThread
DeleteCriticalSection
IsWow64Process
VirtualQueryEx
CreateActCtxW
WriteFile
GetTempPathW
UnmapViewOfFile
DeleteFileW
GetTempFileNameW
CreateFileMappingW
ReleaseActCtx
MapViewOfFile
GetCurrentThread
GetProcAddress
ActivateActCtx
GetEnvironmentVariableW
GetSystemDirectoryW
DeactivateActCtx
GetSystemWow64DirectoryW
Module32FirstW
GetCurrentDirectoryW
GetWindowsDirectoryW
SuspendThread
GetExitCodeThread
GetThreadTimes
OpenThread
Wow64DisableWow64FsRedirection
Wow64RevertWow64FsRedirection
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForDebugEvent
DebugActiveProcessStop
ContinueDebugEvent
DebugActiveProcess
DebugSetProcessKillOnExit
CheckRemoteDebuggerPresent
GetProcessId
OpenProcess
LoadLibraryW
GetLastError
SetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
DisableThreadLibraryCalls
InitializeSListHead
OutputDebugStringW
RaiseException
DecodePointer
ReadFile
InitializeCriticalSectionEx
SetThreadContext
FreeLibrary
user32
UnregisterClassW
wsprintfW
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
OpenThreadToken
RegCloseKey
RegEnumValueW
RegOpenKeyW
RegCreateKeyW
RegSetValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
shlwapi
SHDeleteKeyW
vcruntime140
__std_exception_copy
__std_exception_destroy
_CxxThrowException
memcpy
memmove
_purecall
memchr
__vcrt_InitializeCriticalSectionEx
_except_handler4_common
memset
__std_type_info_destroy_list
__CxxFrameHandler3
__CxxExceptionFilter
__CxxRegisterExceptionObject
__CxxQueryExceptionSize
__CxxDetectRethrow
__CxxUnregisterExceptionObject
__FrameUnwindFilter
__std_terminate
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_initterm
_initterm_e
_invalid_parameter_noinfo
_errno
_seh_filter_dll
terminate
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
abort
api-ms-win-crt-heap-l1-1-0
free
malloc
realloc
_callnewh
_recalloc
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vswprintf_s
api-ms-win-crt-string-l1-1-0
_wcsicmp
wcscpy_s
wcstok_s
_stricmp
towlower
oleaut32
SysAllocStringByteLen
SysStringByteLen
VariantCopy
mscoree
_CorDllMain
??0Assembler@asmjit@@QAE@PAURuntime@1@@Z
??0CodeGen@asmjit@@QAE@PAURuntime@1@@Z
??0HostRuntime@asmjit@@QAE@XZ
??0JitRuntime@asmjit@@QAE@XZ
??0Runtime@asmjit@@QAE@XZ
??0StaticRuntime@asmjit@@QAE@PAXI@Z
??0VMemMgr@asmjit@@QAE@PAX@Z
??0X86Assembler@asmjit@@QAE@PAURuntime@1@I@Z
??0Zone@asmjit@@QAE@I@Z
??1Assembler@asmjit@@UAE@XZ
??1CodeGen@asmjit@@UAE@XZ
??1HostRuntime@asmjit@@UAE@XZ
??1JitRuntime@asmjit@@UAE@XZ
??1Runtime@asmjit@@UAE@XZ
??1StaticRuntime@asmjit@@UAE@XZ
??1VMemMgr@asmjit@@QAE@XZ
??1X86Assembler@asmjit@@UAE@XZ
??1Zone@asmjit@@QAE@XZ
??_FVMemMgr@asmjit@@QAEXXZ
?_alloc@Zone@asmjit@@QAEPAXI@Z
?_emit@X86Assembler@asmjit@@UAEIIABUOperand@2@000@Z
?_grow@Assembler@asmjit@@QAEII@Z
?_grow@PodVectorBase@asmjit@@IAEIII@Z
?_newLabel@Assembler@asmjit@@QAEIPAULabel@2@@Z
?_newLabelLink@Assembler@asmjit@@QAEPAULabelLink@2@XZ
?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B
?_registerIndexedLabels@Assembler@asmjit@@QAEII@Z
?_relocCode@X86Assembler@asmjit@@UBEIPAX_K@Z
?_reserve@Assembler@asmjit@@QAEII@Z
?_reserve@PodVectorBase@asmjit@@IAEIII@Z
?_x86CondToCmovcc@asmjit@@3QBIB
?_x86CondToJcc@asmjit@@3QBIB
?_x86CondToSetcc@asmjit@@3QBIB
?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B
?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B
?_x86ReverseCond@asmjit@@3QBIB
?add@JitRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?add@StaticRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z
?align@X86Assembler@asmjit@@UAEIII@Z
?alloc@VMemMgr@asmjit@@QAEPAXII@Z
?alloc@VMemUtil@asmjit@@SAPAXIPAII@Z
?allocProcessMemory@VMemUtil@asmjit@@SAPAXPAXIPAII@Z
?allocZeroed@Zone@asmjit@@QAEPAXI@Z
?bind@Assembler@asmjit@@UAEIABULabel@2@@Z
?callCpuId@X86CpuUtil@asmjit@@SAXIIPATX86CpuId@2@@Z
?detect@X86CpuUtil@asmjit@@SAXPAUX86CpuInfo@2@@Z
?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ
?dup@Zone@asmjit@@QAEPAXPBXI@Z
?embed@Assembler@asmjit@@UAEIPBXI@Z
?embedLabel@X86Assembler@asmjit@@QAEIABULabel@2@@Z
?emit@Assembler@asmjit@@QAEII@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@00_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@0_K@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@H@Z
?emit@Assembler@asmjit@@QAEIIABUOperand@2@_K@Z
?emit@Assembler@asmjit@@QAEIIH@Z
?emit@Assembler@asmjit@@QAEII_K@Z
?flush@HostRuntime@asmjit@@UAEXPAXI@Z
?getCpuInfo@HostRuntime@asmjit@@UAEPBUCpuInfo@2@XZ
?getHost@CpuInfo@asmjit@@SAPBU12@XZ
?getPageGranularity@VMemUtil@asmjit@@SAIXZ
?getPageSize@VMemUtil@asmjit@@SAIXZ
?getStackAlignment@HostRuntime@asmjit@@UAEIXZ
?make@Assembler@asmjit@@UAEPAXXZ
?noOperand@asmjit@@3UOperand@1@B
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KABUX86Reg@2@IHI@Z
?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z
?release@JitRuntime@asmjit@@UAEIPAX@Z
?release@StaticRuntime@asmjit@@UAEIPAX@Z
?release@VMemMgr@asmjit@@QAEIPAX@Z
?release@VMemUtil@asmjit@@SAIPAXI@Z
?releaseProcessMemory@VMemUtil@asmjit@@SAIPAX0I@Z
?relocCode@Assembler@asmjit@@QBEIPAX_K@Z
?reset@Assembler@asmjit@@QAEX_N@Z
?reset@PodVectorBase@asmjit@@QAEX_N@Z
?reset@VMemMgr@asmjit@@QAEXXZ
?reset@Zone@asmjit@@QAEX_N@Z
?sdup@Zone@asmjit@@QAEPADPBD@Z
?setArch@X86Assembler@asmjit@@QAEII@Z
?setError@CodeGen@asmjit@@QAEIIPBD@Z
?setErrorHandler@CodeGen@asmjit@@QAEIPAUErrorHandler@2@@Z
?sformat@Zone@asmjit@@QAAPADPBDZZ
?shrink@VMemMgr@asmjit@@QAEIPAXI@Z
?x86RegData@asmjit@@3UX86RegData@1@B
Name
.text
Size
514KB
Virtual Size
514KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
243KB
Virtual Size
243KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
512B
Virtual Size
480B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
24KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=10, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=12, id=257, version=24610,
count=5, id=257, version=25305,
count=2, id=147, productName=VS2008 build 21022, version=21022,
count=176, id=1, productName=Unmarked objects,
count=6, id=259, version=25305,
count=29, id=261, version=25305,
count=11, id=260, version=25305,
count=42, id=265, version=25547,
count=4, id=261, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=256, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=255, productName=VS2017 v15.4.5 build 25547, version=25547,
count=1, id=258, productName=VS2017 v15.4.5 build 25547, version=25547,
GameSence 2.0/MInjector.v1.2/x86/MInjector.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 b753ab49b2eb408b20c1826015219baa1d823cfd53f4af824e8d90ac69a827d0
- MD5 8380c303f2c06c41f669ef4d7cc609ae
- SHA1 9bd078d11dd0aae55967bdcd3405e80110a8a44c
- SHA512 d0b908ff1ac5724a522cf07c9062d62f5bb92322708daeffd460d5e0bfb3ea50fbee6b8322d1774d8d028636bcc68f11f0a0c91042f2989708187bb2435087bc
- SSDEEP 1536:XqXW5waRXQ/420MpZwpc6saeXK7420MpZwpc6:GWLQ/4M3BK74M36
- TLSH T11773B2B73D786026D03003FEACD397FE4AA16E7B501CDA9569A4FF8A7E4063C0916947
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Password
GS-255A22BB-90D2C5F3-25EA73B4
Minor OS version
0
Major OS version
4
Entry point
52874
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\Nicolas\source\repos\MInjector\MInjector\obj\x86\Release\MInjector.pdb
mscoree
_CorExeMain
Name
.text
Size
44KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
32KB
Virtual Size
31KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
GameSence 2.0/Новый текстовый документ.txt
- SHA256 e8edc9fbaa0f31c46b17ff8986b22bb7e91fb2d13c4a453f386c481f3eeccb18
- MD5 e115cdcfb69014443c7856782ac7f62f
- SHA1 5b0084885ead356ddffbc3cb5bbe36ea047ffda1
- SHA512 a70a2c342f077a6ad009f6d0849cd4b7f14cbca02bf41c03b99b5176d9f18a33fc036bdf5eb10ca55d2e43c28603ccd7a791a33b4a950e638d515e586208978a
- TLSH T159E07D66130770EB3E1C8553CC143C1E8A1292FC5F3E471A08E01D7E20E2050B00D43F
- MD5 SHA1 SHA512 TLSH