020d7560b99b5444a7bff590e70e8989eb206e6d8be13f9b988632275f640de4

Sharing

Copy URL Twitter E-mail

General

Target
020d7560b99b5444a7bff590e70e8989eb206e6d8be13f9b988632275f640de4
Size 498KB
Sample260916-v8rx7stcjb
SHA256 020d7560b99b5444a7bff590e70e8989eb206e6d8be13f9b988632275f640de4
MD5 a45717d22beaa44810239a99509aa64b
SHA1 b6e664b9e9740de6ebd2072797cb5c14f25f5d1a
SHA512 38f98894a2397f502f3695a0f378cf3d1c34ee91232c85c970b8cb0d3566b484152a333aac7701eac16b75167e9eaaa34f7083005f4434db76e274c16e1eddc2
SSDEEP 12288:6gYOT1Hx1qjS6e5ZyE/KhdR3rIGzhBQnkB5PiYn1F7s:6uN4EShPUGzjQwPiYn
TLSH
T124B49E45F1B993FCD02BA139D696B50FEE353858172049DB73E448A81BE37F066BA312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
020d7560b99b5444a7bff590e70e8989eb206e6d8be13f9b988632275f640de4

File Explorer

020d7560b99b5444a7bff590e70e8989eb206e6d8be13f9b988632275f640de4

.dll 498KB

020d7560b99b5444a7bff590e70e8989eb206e6d8be13f9b988632275f640de4

IMPHASH 06a2c5a2f879a1af0bf57daf80be27e0
SHA256 020d7560b99b5444a7bff590e70e8989eb206e6d8be13f9b988632275f640de4
MD5 a45717d22beaa44810239a99509aa64b
SHA1 b6e664b9e9740de6ebd2072797cb5c14f25f5d1a
SHA512 38f98894a2397f502f3695a0f378cf3d1c34ee91232c85c970b8cb0d3566b484152a333aac7701eac16b75167e9eaaa34f7083005f4434db76e274c16e1eddc2
SSDEEP 12288:6gYOT1Hx1qjS6e5ZyE/KhdR3rIGzhBQnkB5PiYn1F7s:6uN4EShPUGzjQwPiYn
TLSH
T124B49E45F1B993FCD02BA139D696B50FEE353858172049DB73E448A81BE37F066BA312
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

409528

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\IVCODDER\Desktop\IV_DEV\Operation HArsh\FpsNigga\x64\Release\FpsNigga.pdb

d3d11

D3D11CreateDeviceAndSwapChain

user32

EmptyClipboard GetClipboardData SetClipboardData GetKeyState GetMessageExtraInfo CloseClipboard CallWindowProcW ScreenToClient GetCapture SetWindowLongPtrW OpenClipboard GetCursorPos TrackMouseEvent SetCursorPos ReleaseCapture GetClientRect GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture SetCursor GetAsyncKeyState ClientToScreen IsWindowUnicode

kernel32

InitializeSListHead GetSystemTimeAsFileTime WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive SleepConditionVariableSRW AllocConsole IsBadReadPtr CreateThread DisableThreadLibraryCalls OpenThread SetThreadContext FlushInstructionCache GetModuleHandleW GetCurrentProcessId GetThreadContext HeapAlloc GetLocaleInfoA MultiByteToWideChar LoadLibraryA QueryPerformanceFrequency GetProcAddress QueryPerformanceCounter GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock VirtualFree VirtualAlloc GetSystemInfo VirtualQuery HeapCreate VirtualProtect HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep GetLastError HeapReAlloc CloseHandle

shell32

ShellExecuteW

d3dcompiler_47

D3DCompile

imm32

ImmSetCandidateWindow ImmGetContext ImmReleaseContext ImmSetCompositionWindow

msvcp140

?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

strchr __std_exception_destroy __std_exception_copy __C_specific_handler _CxxThrowException memset __std_type_info_destroy_list memchr memcmp memcpy memmove __std_terminate

api-ms-win-crt-stdio-l1-1-0

freopen_s __stdio_common_vsprintf_s fread __stdio_common_vsprintf _wfopen fwrite __stdio_common_vfprintf fseek fclose fflush __acrt_iob_func ftell __stdio_common_vsscanf

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _initialize_narrow_environment _cexit _initterm _initterm_e _seh_filter_dll _configure_narrow_argv

api-ms-win-crt-math-l1-1-0

sqrtf logf cosf tanf acosf atan2f ceilf fmodf sinf powf

api-ms-win-crt-string-l1-1-0

strlen strncpy strncmp strcmp

Sharing

General

Malware Config

Signatures

File Explorer

020d7560b99b5444a7bff590e70e8989eb206e6d8be13f9b988632275f640de4

d3d11

user32

kernel32

shell32

d3dcompiler_47

imm32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

generic