rage.cc Fn.rar
- SHA256 f19edb6a4d81702f547eb39b3b6faef7d79a5916add1b5b6a6e65c5c0852c819
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rage.cc free fn .exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
General
- Target rage.cc Fn.rar
- Size 5.2MB
- Sample261001-vty3za1grd
- SHA256 f19edb6a4d81702f547eb39b3b6faef7d79a5916add1b5b6a6e65c5c0852c819
- MD5 be4a7455df05b75d04b64467c7a2e287
- SHA1 af80eb246014963f89ee32ce3f704ee9aa2ebe76
- SHA512 3e6583581cb6ee1b596c9f8a9ce35260114580727f2653a80e2021e2ad2b6a4c34f4de43ff21dc66a41ca506aa9e43393b94fa1f78e7f573780b3574d7b10e1d
- SSDEEP 98304:l9l9irw7BbzgMe+MFDI0SlzJsx6qTIfwmLO+D/hcaq98NGN6Pwp:l9l9irWbzdeplSlzJsx6quHi+D/Q9kGr
- TLSH T1084633C890E4585FED78C5BEBFB3FC267E876DCD0A4599DB6AA3074A0018D86C23445B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/rage.cc free fn .exe
File Explorer
-
rage.cc Fn.rar.rar 5.2MB
-
rage.cc free fn .exe.exe 1.1MB
-
rage.cc free fn .exe.c6.5MB
-
rage.cc free fn .exe.i641015.8MB
rage.cc free fn .exe
- IMPHASH 69b0e3f526d9efd560107e58e9cdb40b
- SHA256 a84298d073a599d3ec8897ce827f98ba02d60500a11a665f79fcb23ec9b0e05b
- MD5 f288759479f49bac74a47d1f5f55f56a
- SHA1 fbe20dee0c0180ccc94c873e94316690a6198e86
- SHA512 88a5b1f935bdbf757120c9b730a55683ebbd70d8be5ee078f6df6b988b3743b1fd7193864fd95d3af223e4cf07e18c3edd0e1c9e772afa2483f57c151ace83eb
- SSDEEP 24576:+i3F7clM3N+CkuGKFPiIn1yPIAbmL1yVA:53ilA0xInumLSA
- TLSH T13145C007F36A42ACC13BA538D691D31BF73638542B15D2CB73E819941FA72F05EBA291
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
497704
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\qwert\Downloads\Adrenaline fn src (3)\Adrenaline fn src\x64\Release\vkojii base src fn.pdb
kernel32
OutputDebugStringA
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
IsDBCSLeadByte
GetProcAddress
FreeLibrary
QueryPerformanceCounter
GetModuleFileNameA
lstrcmpiW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
SleepConditionVariableSRW
Sleep
GetCurrentThreadId
LocalFree
FormatMessageA
GetConsoleWindow
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
GetFileInformationByHandleEx
WakeAllConditionVariable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
CloseHandle
Process32FirstW
Process32NextW
GetCurrentProcess
TerminateProcess
GetLastError
CreateToolhelp32Snapshot
CreateFileW
DeviceIoControl
GetLocaleInfoEx
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
SetConsoleTitleA
user32
SetCursorPos
ReleaseCapture
IsWindowUnicode
GetClipboardData
GetClientRect
SetClipboardData
SetCursor
SetCapture
LoadCursorW
GetForegroundWindow
GetKeyboardLayout
TrackMouseEvent
ClientToScreen
OpenClipboard
UpdateWindow
PostQuitMessage
TranslateMessage
SetLayeredWindowAttributes
MessageBoxA
PeekMessageW
DispatchMessageW
GetAsyncKeyState
ScreenToClient
ShowWindow
RegisterClassExW
GetWindowLongPtrW
GetSystemMetrics
CreateWindowExW
CloseClipboard
GetCapture
SetWindowLongPtrW
GetCursorPos
DestroyWindow
ShowCursor
GetKeyState
DefWindowProcW
GetMessageExtraInfo
EmptyClipboard
shell32
ShellExecuteW
msvcp140
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@AEAH@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?good@ios_base@std@@QEBA_NXZ
??Bios_base@std@@QEBA_NXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?_Id_cnt@id@locale@std@@0HA
?_Winerror_map@std@@YAHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z
?_Syserror_map@std@@YAPEBDH@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEBD_J@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
_Mtx_unlock
_Query_perf_counter
_Mtx_lock
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xbad_alloc@std@@YAXXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
?_Throw_Cpp_error@std@@YAXH@Z
_Query_perf_frequency
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
d3d11
D3D11CreateDeviceAndSwapChain
dwmapi
DwmExtendFrameIntoClientArea
imm32
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext
ImmReleaseContext
d3dcompiler_47
D3DCompile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
__std_exception_destroy
__std_exception_copy
__std_terminate
strchr
memcmp
_CxxThrowException
__C_specific_handler
__current_exception_context
__current_exception
memset
memcpy
memchr
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
realloc
malloc
free
api-ms-win-crt-runtime-l1-1-0
terminate
abort
_invoke_watson
_configure_narrow_argv
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
_initialize_onexit_table
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
system
api-ms-win-crt-stdio-l1-1-0
__p__commode
fclose
__acrt_iob_func
fflush
_get_stream_buffer_pointers
_fseeki64
fsetpos
setvbuf
fgetpos
fseek
__stdio_common_vsprintf_s
fputc
ungetc
fgetc
__stdio_common_vfprintf
__stdio_common_vsscanf
fread
_set_fmode
__stdio_common_vsprintf
_wfopen
fwrite
ftell
api-ms-win-crt-time-l1-1-0
_time64
_localtime64_s
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-string-l1-1-0
strcpy_s
strncmp
strcmp
strncpy
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
api-ms-win-crt-math-l1-1-0
powf
_fdclass
sinf
asin
atan2
tanf
sqrt
ceilf
sqrtf
cosf
fmodf
log
__setusermatherr
acosf
pow
logf
Name
.text
Size
489KB
Virtual Size
489KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
256KB
Virtual Size
256KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
372KB
Virtual Size
374KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
21KB
Virtual Size
21KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
488B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
1024B
Virtual Size
736B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=20, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=4, id=259, version=35207,
count=10, id=260, version=35207,
count=37, id=261, version=35207,
count=6, id=257, version=35207,
count=17, id=257, version=33145,
count=326, id=1, productName=Unmarked objects,
count=9, id=265, version=35228,
count=1, id=255, version=35228,
count=1, id=258, version=35228,
rage.cc free fn .exe.c
- SHA256 c3d53d00cf9fa40bbe84b94d63e434bc350a195a79e357d12a4e42c047ad5a4b
- MD5 9964aba25c78590827d4dcdbe00aa856
- SHA1 37c27dc8e5fa44059315403bb4ff027922df9446
- SHA512 849198b69a30930c01e3a16f9ee0efbb449252a092e4a95b3cef03facb9d039f3cc730ded15dc22cf0916b17540539b85126f794fe982f4993835263d2386851
- SSDEEP 49152:TgkpPD1DtG3Y/EMlpVw/AFs+/tVo6VivRmsYBF5zLm+JDvLINnI0QPyqEw6kr58I:+jW
- TLSH T1DF66AA427ADEC88996F9D52CF228560EC145C31758EA00CBBB7D1D844FB3E5339AF986
- MD5 SHA1 SHA512 SSDEEP TLSH
rage.cc free fn .exe.i64
- SHA256 7362f4ef6e0fa9fa35fcd242672aa2f7a00af63d38a4ed8d9ebeb2835416bf6d
- MD5 644f6269d8cb6d9cca215906a882419d
- SHA1 b9a6bd692a014cdc2db799562cc15f62f708178f
- SHA512 21a81aab1107966f93ddadd1411381d1b84ba4c03a62e3b062a5fc8d3769d76fa5a1e0ff670f6f13f31d8537ed3ce060bd76b9681f8f244e8ab4aa1b122ca311
- SSDEEP 49152:onBjb14GNzeqW48sPNgOmm5kuhPJdxNJNSEH0Uyg5OHV6d5hg68rNnqJNF0u4D5R:aB/FZr5lsNOaRRGcD
- TLSH T13CB9B25AB7C27F79C1744A3691B693343771D95B220B2B2232612E293CFB3125F60BD9
- MD5 SHA1 SHA512 SSDEEP TLSH