SimpleMiniMap-0[.]1[.]1[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
SimpleMiniMap-0.1.1.zip
Size 543KB
Sample261113-xnkphaft81
SHA256 b652acdea462536dc12cf2f71150fa44e990e135c1b124ef4eb4d8753e4af8e1
MD5 843616ce628e0af844ed461c55942e29
SHA1 302747049f4ca39ed3d3eaef50d846fd70cf3d0c
SHA512 a6003e40967fd36321e8fbfc10725ce030c026d7fdb98da698659841c845668af6f313fea53232b6d0f39f4d370d59f495a3def31a501504c25a95f9b77c8492
SSDEEP 12288:yB5ml+rNS1rK8NbRnbYxY/+lxLM1v6NwiUNEHlmNynZnUNYMjduvma:o5mPKANyYe2yKijHlmN8UuMpuvl
TLSH
T1B2C4231B2D8A70D9873329FCAE402F5F05FA97B39DFE31951A156969084387E2872387
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SimpleMiniMap/dlls/main.dll

File Explorer

SimpleMiniMap-0.1.1.zip

.zip 543KB
SimpleMiniMap/dlls/main.dll

.dll 1.2MB

SimpleMiniMap-0.1.1.zip

SHA256 b652acdea462536dc12cf2f71150fa44e990e135c1b124ef4eb4d8753e4af8e1
MD5 843616ce628e0af844ed461c55942e29
SHA1 302747049f4ca39ed3d3eaef50d846fd70cf3d0c
SHA512 a6003e40967fd36321e8fbfc10725ce030c026d7fdb98da698659841c845668af6f313fea53232b6d0f39f4d370d59f495a3def31a501504c25a95f9b77c8492
SSDEEP 12288:yB5ml+rNS1rK8NbRnbYxY/+lxLM1v6NwiUNEHlmNynZnUNYMjduvma:o5mPKANyYe2yKijHlmN8UuMpuvl
TLSH
T1B2C4231B2D8A70D9873329FCAE402F5F05FA97B39DFE31951A156969084387E2872387
MD5 SHA1 SHA512 SSDEEP TLSH

SimpleMiniMap/dlls/main.dll

IMPHASH 5414885b17e04de1c26693bd2e8a2615
SHA256 856bdf9ff85004943bf2b07bdddedb677a7f5eeebc37b08450fbb8ea939b19ec
MD5 31ba20eff1a83adc417597540981fd03
SHA1 944054b309c92e62885d03fa17ece9707021882f
SHA512 0fc7226fcf05f50345a5192919895268aa073a6d45021b25ed99d6dfb3a85c25bb35c5bd4e2d92bfd0363e0557284ec66b0b15d786a07fcc5707add73e82de8f
SSDEEP 24576:hrMF6KO+K30qEHGdDTEQhWq8vJaoHCVF:hrMFOD30ZGdDI7vJaoiV
TLSH
T162455B11BA46A57DC569C470835B4A67AA3130CB0B35BEFF02D096393F6ABE02B3D715
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

885104

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\a\SimpleMiniMap\SimpleMiniMap\build\shim\main.pdb

api-ms-win-core-synch-l1-2-0

WakeByAddressAll WaitOnAddress WakeByAddressSingle

bcryptprimitives

ProcessPrng

kernel32

InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime SleepConditionVariableSRW GetLastError CloseHandle WaitForSingleObject SetLastError GetFullPathNameW GetCurrentThreadId SetFileInformationByHandle CreateFileW GetStdHandle GetCurrentProcess GetProcessHeap HeapFree HeapReAlloc QueryPerformanceCounter GetCurrentProcessId RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind SetFileTime GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW GetCurrentDirectoryW lstrlenW FindFirstFileExW FindClose GetProcAddress WideCharToMultiByte WaitForSingleObjectEx LoadLibraryA CreateMutexA ReleaseMutex GetEnvironmentVariableW HeapAlloc GetModuleFileNameW MultiByteToWideChar WriteConsoleW GetConsoleMode GetConsoleOutputCP FlsFree FlsAlloc GetModuleHandleExW GetModuleHandleW IsThreadAFiber FlsSetValue FormatMessageW QueryPerformanceFrequency ReleaseSRWLockExclusive WakeAllConditionVariable AcquireSRWLockExclusive

ntdll

NtReadFile NtWriteFile RtlNtStatusToDosError

ue4ss

?on_cpp_mods_loaded@CppUserModBase@RC@@UEAAXXZ ?get_default_devices_ref@DefaultTargets@Output@RC@@SAAEAV?$vector@V?$unique_ptr@VOutputDevice@Output@RC@@U?$default_delete@VOutputDevice@Output@RC@@@std@@@std@@V?$allocator@V?$unique_ptr@VOutputDevice@Output@RC@@U?$default_delete@VOutputDevice@Output@RC@@@std@@@std@@@2@@std@@XZ ?Free@FMemory@Unreal@RC@@SAXPEAX@Z ??0CppUserModBase@RC@@QEAA@XZ ??1CppUserModBase@RC@@UEAA@XZ ?register_keydown_event@CppUserModBase@RC@@IEAAXW4Key@Input@2@AEBV?$function@$$A6AXXZ@std@@E@Z ?register_keydown_event@CppUserModBase@RC@@IEAAXW4Key@Input@2@AEBV?$array@W4ModifierKey@Input@RC@@$0BD@@std@@AEBV?$function@$$A6AXXZ@6@E@Z ??0FName@Unreal@RC@@QEAA@XZ ??0FName@Unreal@RC@@QEAA@II@Z ??0FName@Unreal@RC@@QEAA@PEB_WW4EFindName@12@PEAX@Z ?ToString@FName@Unreal@RC@@QEAA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ??0FStaticConstructObjectParameters@Unreal@RC@@QEAA@PEBVUClass@12@PEAVUObject@12@@Z ?StaticConstructObject@UObjectGlobals@Unreal@RC@@YAPEAVUObject@23@AEBUFStaticConstructObjectParameters@23@@Z ?FindObject@UObjectGlobals@Unreal@RC@@YAPEAVUObject@23@PEAVUClass@23@PEAV423@PEB_W_NPEAUObjectSearcher@23@@Z ?FindAllOf@UObjectGlobals@Unreal@RC@@YAXV?$basic_string_view@DU?$char_traits@D@std@@@std@@AEAV?$vector@PEAVUObject@Unreal@RC@@V?$allocator@PEAVUObject@Unreal@RC@@@std@@@5@@Z ?IsA@FField@Unreal@RC@@QEAA_NAEBVFFieldClassVariant@23@@Z ?GetEmptyString@?$TStringBase@_W@Unreal@RC@@KAPEB_WXZ ??1FString@Unreal@RC@@QEAA@XZ ?GetClassPrivate@UObjectBase@Unreal@RC@@QEAAAEAPEAVUClass@23@XZ ?IsA@UObjectBase@Unreal@RC@@QEBA_NPEAVUClass@23@@Z ?ProcessEvent@UObject@Unreal@RC@@QEAAXPEAVUFunction@23@PEAX@Z ?GetName@UObject@Unreal@RC@@QEBA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ ?GetFunctionByNameInChain@UObject@Unreal@RC@@QEAAPEAVUFunction@23@VFName@23@@Z ?Reset@FWeakObjectPtr@Unreal@RC@@QEAAXXZ ??4FWeakObjectPtr@Unreal@RC@@QEAAXPEBVUObject@12@@Z ?Get@FWeakObjectPtr@Unreal@RC@@QEBAPEAVUObject@23@XZ ??1FCallbackOptions@Hook@Unreal@RC@@QEAA@XZ ??0FCallbackOptions@Hook@Unreal@RC@@QEAA@$$QEAU0123@@Z ?RegisterLoadMapPreCallback@Hook@Unreal@RC@@YA_KV?$function@$$A6AXAEAV?$TCallbackIterationData@_N@Hook@Unreal@RC@@PEAVUEngine@34@AEAUFWorldContext@34@UFURL@34@PEAVUPendingNetGame@34@AEAVFString@34@@Z@std@@UFCallbackOptions@123@@Z ?RegisterEngineTickPostCallback@Hook@Unreal@RC@@YA_KV?$function@$$A6AXAEAV?$TCallbackIterationData@X@Hook@Unreal@RC@@PEAVUEngine@34@M_N@Z@std@@UFCallbackOptions@123@@Z ?RegisterBeginPlayPostCallback@Hook@Unreal@RC@@YA_KV?$function@$$A6AXAEAV?$TCallbackIterationData@X@Hook@Unreal@RC@@PEAVAActor@34@@Z@std@@UFCallbackOptions@123@@Z ?RegisterEndPlayPreCallback@Hook@Unreal@RC@@YA_KV?$function@$$A6AXAEAV?$TCallbackIterationData@X@Hook@Unreal@RC@@PEAVAActor@34@W4EEndPlayReason@34@@Z@std@@UFCallbackOptions@123@@Z ?UnregisterCallback@Hook@Unreal@RC@@YA_N_K@Z ?FindProperty@UStruct@Unreal@RC@@QEAAPEAVFProperty@23@VFName@23@@Z ?GetParmsSize@UFunction@Unreal@RC@@QEAAAEAGXZ ?ToString@FSoftObjectPath@Unreal@RC@@QEBA?AVFString@23@XZ ?GetArrayDim@FProperty@Unreal@RC@@QEAAAEAHXZ ?GetElementSize@FProperty@Unreal@RC@@QEAAAEAHXZ ?GetElementSize@FProperty@Unreal@RC@@QEBAAEBHXZ ?GetOffset_Internal@FProperty@Unreal@RC@@QEAAAEAHXZ ?GetOffset_Internal@FProperty@Unreal@RC@@QEBAAEBHXZ ?GetMinAlignment@FProperty@Unreal@RC@@QEBAHXZ ?StaticClass@FBoolProperty@Unreal@RC@@SA?AVFFieldClassVariant@23@XZ ?GetByteOffset@FBoolProperty@Unreal@RC@@QEAAAEAEXZ ?GetByteMask@FBoolProperty@Unreal@RC@@QEAAAEAEXZ ?GetFieldMask@FBoolProperty@Unreal@RC@@QEAAAEAEXZ ?StaticClass@FMapProperty@Unreal@RC@@SA?AVFFieldClassVariant@23@XZ ?GetKeyProp@FMapProperty@Unreal@RC@@QEAAAEAPEAVFProperty@23@XZ ?GetValueProp@FMapProperty@Unreal@RC@@QEAAAEAPEAVFProperty@23@XZ ?GetRowMap@UDataTable@Unreal@RC@@QEAAAEAV?$TMap@VFName@Unreal@RC@@PEAEVFDefaultSetAllocator@23@U?$TDefaultMapHashableKeyFuncs@VFName@Unreal@RC@@PEAE$0A@@23@@23@XZ ?PackageName@FAssetData@Unreal@RC@@QEAA?AVFName@23@XZ ?GetAssetByObjectPath@UAssetRegistry@Unreal@RC@@QEAA?AUFAssetData@23@VFName@23@_N@Z ?GetAssetRegistry@UAssetRegistryHelpers@Unreal@RC@@SA?AVFScriptInterface@23@XZ ?GetAsset@UAssetRegistryHelpers@Unreal@RC@@SAPEAVUObject@23@AEAUFAssetData@23@@Z ?on_update@CppUserModBase@RC@@UEAAXXZ ?on_ui_init@CppUserModBase@RC@@UEAAXXZ ?on_program_start@CppUserModBase@RC@@UEAAXXZ ?on_lua_start@CppUserModBase@RC@@UEAAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@AEAVLua@LuaMadeSimple@2@11AEAV?$vector@PEAVLua@LuaMadeSimple@RC@@V?$allocator@PEAVLua@LuaMadeSimple@RC@@@std@@@4@@Z ?on_lua_start@CppUserModBase@RC@@UEAAXAEAVLua@LuaMadeSimple@2@00AEAV?$vector@PEAVLua@LuaMadeSimple@RC@@V?$allocator@PEAVLua@LuaMadeSimple@RC@@@std@@@std@@@Z ?on_lua_stop@CppUserModBase@RC@@UEAAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@AEAVLua@LuaMadeSimple@2@11AEAV?$vector@PEAVLua@LuaMadeSimple@RC@@V?$allocator@PEAVLua@LuaMadeSimple@RC@@@std@@@4@@Z ?on_lua_stop@CppUserModBase@RC@@UEAAXAEAVLua@LuaMadeSimple@2@00AEAV?$vector@PEAVLua@LuaMadeSimple@RC@@V?$allocator@PEAVLua@LuaMadeSimple@RC@@@std@@@std@@@Z ?on_dll_load@CppUserModBase@RC@@UEAAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@@Z ?render_tab@CppUserModBase@RC@@UEAAXXZ ?on_lua_start@CppUserModBase@RC@@UEAAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@AEAVLua@LuaMadeSimple@2@11PEAV562@@Z ?on_lua_start@CppUserModBase@RC@@UEAAXAEAVLua@LuaMadeSimple@2@00PEAV342@@Z ?on_lua_stop@CppUserModBase@RC@@UEAAXV?$basic_string_view@_WU?$char_traits@_W@std@@@std@@AEAVLua@LuaMadeSimple@2@11PEAV562@@Z ?on_lua_stop@CppUserModBase@RC@@UEAAXAEAVLua@LuaMadeSimple@2@00PEAV342@@Z

user32

GetForegroundWindow GetWindowThreadProcessId GetAsyncKeyState

msvcp140

?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ??1?$codecvt@_WDU_Mbstatet@@@std@@MEAA@XZ ??0?$codecvt@_WDU_Mbstatet@@@std@@QEAA@_K@Z ?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z ?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Locimp_Addfac@_Locimp@locale@std@@CAXPEAV123@PEAVfacet@23@_K@Z ?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z ??1facet@locale@std@@MEAA@XZ ??0facet@locale@std@@IEAA@_K@Z ?c_str@?$_Yarn@D@std@@QEBAPEBDXZ ??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z ?_Gettrue@_Locinfo@std@@QEBAPEBDXZ ?_Getfalse@_Locinfo@std@@QEBAPEBDXZ ?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ ??1_Locinfo@std@@QEAA@XZ ??0_Locinfo@std@@QEAA@PEBD@Z _Mbrtowc ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z ?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A ?id@?$numpunct@_W@std@@2V0locale@2@A ?_Id_cnt@id@locale@std@@0HA ?_Incref@facet@locale@std@@UEAAXXZ

vcruntime140

__CxxFrameHandler3 memset memcmp memcpy _CxxThrowException __std_exception_destroy __std_exception_copy __std_terminate __C_specific_handler memmove __std_type_info_destroy_list

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-math-l1-1-0

round roundf _hypot floor powf exp log sin cos atan2 fmodf fmod _hypotf ceil _dsign pow

api-ms-win-crt-heap-l1-1-0

malloc _callnewh free calloc

api-ms-win-crt-locale-l1-1-0

localeconv

api-ms-win-crt-string-l1-1-0

strlen wcslen

api-ms-win-crt-runtime-l1-1-0

_initterm_e _initterm _cexit _crt_atexit _register_onexit_function _seh_filter_dll _configure_narrow_argv _initialize_narrow_environment _initialize_onexit_table _execute_onexit_table