Skip to content

Latest commit

 

History

History
43 lines (25 loc) · 1.5 KB

2024-12-28-Unknown.md

File metadata and controls

43 lines (25 loc) · 1.5 KB

Basic Static Analysis

Stage 1

  • Notes:

    • Floss errors out when trying to read static strings

    • Strings works fine but most of the strings are obfuscated outside of some windows dlls, several system calls and an XML script at the end

    • Depends on Dear ImGui 1.91.6 WIP version for interface (most recent release): https://github.com/ocornut/imgui/tree/v1.91.6

    • Ascii Art or Padding?

Basic Dynamic Analysis

Stage 1

  • Notes:

    • Installer is definitely not a real one

      • Notice the typo destinational and no way to close out or cancel normally
    • Why all of the offsets?

    • Alt + F4 / Close from Taskbar throws this error

      • Don't know who 55yar is but that could be a signature
    • Isn't continuing in the background right now

    • On both runs, this file doesn't exist on the hard drive

    • Empty Folder while "installing"

    • Added file to Regedit