Program does not show much activity (idle) Static PE information: data direc tory type: IMAGE_DIR ECTORY_ENT RY_DEBUGīinary string: d:\PWE\Dev elop\Game\ runtime\Ga me_publish _PWE.pdb s ource: Rai derz.exe Static file information: File size 8792576 > 1048576 Submission file is bigger than most known malware samples String found in binary or memory: data/inter face/loadi ng/loading %02d.jpg Sample might require command line arguments Key opened: HKEY_CURRE NT_USER\So ftware\Pol icies\Micr osoft\Wind ows\Safer\ CodeIdenti fiers ![]() Static PE information: 32BIT_MACH INE, EXECU TABLE_IMAG E, LARGE_A DDRESS_AWA RE, RELOCS _STRIPPEDĬlassification label: mal52.winE functionality to instantiate COM classesĬode function: 0_2_008EF0 B0 ImmGetD efaultIMEW nd,SendMes sageA,ImmG etContext, ImmGetConv ersionStat us,ImmSetC onversionS tatus,ImmN otifyIME,I mmReleaseC ontext,Imm AssociateC ontext,CoI nitialize, CoCreateIn stance, Sample file is different than original file name gathered from version info Static PE information: Resource n ame: RT_IC ON type: G LS_BINARY_ LSB_FIRST exeįound potential string decryption / allocating functionsĬode function: String fun ction: 004 0D500 appe ars 51 tim esĬode function: String fun ction: 004 079F0 appe ars 95 tim esĬode function: String fun ction: 008 70746 appe ars 132 ti mesĬode function: String fun ction: 005 50B80 appe ars 73 tim es text IMAGE _SCN_MEM_E XECUTE, IM AGE_SCN_ME M_WRITE, I MAGE_SCN_C NT_CODE, I MAGE_SCN_M EM_READ Key, Mouse, Clipboard, Microphone and Screen Capturing: to/?p=bil ll ww.raiderz m/coinz.ht ml ww.raiderz ![]() String found in binary or memory: et.net/rai derz/raide rz_serverl ist_us_wes t.xml ![]() String found in binary or memory: et.net/rai derz/raide rz_serverl ist_us_eas t.xmlhttp: //maiet.ne t/raiderz/ raiderz_se rverlist_u String found in binary or memory: et.net/rai derz/raide rz_serverl ist_us_eas t.xml String found in binary or memory: support-be rlin.gamef / String found in binary or memory: support-be rlin.gamef
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |