Shampiss-UM[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Shampiss-UM.exe
Size 1.0MB
Sample261002-q91vaa1zhy
SHA256 7dfb6d6ec325e0b2373a1dedce01a8c6010c3d055fc7b16d55f493aa4935bce6
MD5 3b59501da3af82c4e87cb2a3d67954f2
SHA1 26f08046606a2bff97e7911b0fe4754b61fde524
SHA512 2936762d78d111e22ccbf374f1789fa582e03df6a9a03ad4467baf60c9ed231fff46f197d830551503a08185a7f2e889b434cf451b32b587eabc10305ced7874
SSDEEP 24576:b8CgiK2CMtpSFDfM9Z8V1qR9LviPn313zjx/sN7:yiR6fM9Z8bSgPn3diN7
TLSH
T1AF25AF09B1AA05E8C577A578C976A50FFB31740D0B7049F723E845E43FA36E85A7AB03
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Shampiss-UM.exe

File Explorer

Shampiss-UM.exe

.exe 1.0MB

Shampiss-UM.exe

IMPHASH 0a9fce289d24e3fb953044d2e603a3e6
SHA256 7dfb6d6ec325e0b2373a1dedce01a8c6010c3d055fc7b16d55f493aa4935bce6
MD5 3b59501da3af82c4e87cb2a3d67954f2
SHA1 26f08046606a2bff97e7911b0fe4754b61fde524
SHA512 2936762d78d111e22ccbf374f1789fa582e03df6a9a03ad4467baf60c9ed231fff46f197d830551503a08185a7f2e889b434cf451b32b587eabc10305ced7874
SSDEEP 24576:b8CgiK2CMtpSFDfM9Z8V1qR9LviPn313zjx/sN7:yiR6fM9Z8bSgPn3diN7
TLSH
T1AF25AF09B1AA05E8C577A578C976A50FFB31740D0B7049F723E845E43FA36E85A7AB03
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

607508

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Admin\Downloads\Projects\Multi-Game-Collections\BY CCODIX 1.4\BY CCODIX 1.4\bo all\bo\Champ bo7\Shampiss-COD\x64\Release\Shampiss-UM.pdb

kernel32

GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock SetThreadPriority GetCurrentThread OpenProcess CloseHandle LoadLibraryW GetCurrentProcessId GetModuleHandleW SetConsoleTitleA AllocConsole GetLastError VirtualFree VirtualAlloc SetConsoleTextAttribute GetStdHandle SetEndOfFile WriteConsoleW HeapSize HeapReAlloc SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP GetACP IsValidCodePage GetTimeZoneInformation OutputDebugStringA GetExitCodeProcess WaitForSingleObject GetFileSizeEx GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW VirtualProtect FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetFileType ReadConsoleW GetConsoleMode SetFilePointerEx QueryPerformanceCounter FreeLibrary GetProcAddress GetCommandLineW GetCommandLineA WriteFile GetModuleFileNameW IsDBCSLeadByte QueryPerformanceFrequency ExitProcess GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryA MultiByteToWideChar GetLocaleInfoA CreateProcessW CreateThread TerminateProcess ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead TryAcquireSRWLockExclusive Sleep LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx InitializeCriticalSectionEx EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ReadFile GetCurrentProcess RtlUnwind

user32

GetCursorPos IsWindowUnicode GetClientRect SetCursorPos ReleaseCapture SetCursor GetWindow CreateWindowExW GetSystemMetrics RegisterClassExW ShowWindow SetLayeredWindowAttributes PostQuitMessage BeginPaint EndPaint SetWindowDisplayAffinity SendInput DispatchMessageW PeekMessageW OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData DefWindowProcW GetKeyState GetMessageExtraInfo ScreenToClient GetCapture ClientToScreen TrackMouseEvent GetKeyboardLayout GetForegroundWindow LoadCursorW SetCapture

shell32

ShellExecuteW

ole32

CoInitializeEx

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

imm32

ImmSetCompositionWindow ImmReleaseContext ImmGetContext ImmSetCandidateWindow

d3d11

D3D11CreateDeviceAndSwapChain

Name

.text

Size

811KB

Virtual Size

811KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

177KB

Virtual Size

177KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Shampiss-UM.exe

kernel32

user32

shell32

ole32

d3dcompiler_47

dwmapi

imm32

d3d11

generic