Static task
static1
Behavioral task
behavioral1
Sample
Valorant.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Valorant.exe
Resource
win10v2004-20220812-en
General
-
Target
Valorant.exe
-
Size
1.7MB
-
MD5
c19457449fa36fbd6de5a33e156aa6d7
-
SHA1
4998695d047f8ec7eda4233fb7aedfa43674d83d
-
SHA256
e49dcee1535aa5b80bd0d555104b1ccf10050340936d52b80a7109efbe615193
-
SHA512
5b6a325ca53edb4399afb3d7971ee9ccf56ce844012148531bcb031761cb57086f6b74d643eeffb0bfd7d17b29531a7cb2376465bce2ddc10e55dcd92e282a6c
-
SSDEEP
24576:uKJtinEGH/zANee4VlY/Alj6c9Wud1BeMH7nWBnZ:uutinEGH/FrWud1Fn
Malware Config
Signatures
Files
-
Valorant.exe.exe windows x64
9c8cfe8602224b7f47b0b04964871955
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
CloseHandle
GetLastError
SetLastError
Sleep
CreateThread
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
GetProcessHeap
HeapFree
HeapAlloc
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoW
RaiseException
QueryPerformanceFrequency
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId
VirtualQuery
FreeLibrary
QueryPerformanceCounter
VerSetConditionMask
WideCharToMultiByte
MultiByteToWideChar
GlobalLock
GlobalFree
GlobalUnlock
IsDebuggerPresent
GlobalAlloc
user32
UpdateWindow
GetSystemMetrics
GetAsyncKeyState
GetWindowRect
OpenClipboard
CloseClipboard
SetWindowPos
PeekMessageW
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
CreateWindowExA
SetClipboardData
GetClipboardData
EmptyClipboard
TrackMouseEvent
GetKeyState
LoadIconW
GetWindow
GetWindowThreadProcessId
EnumWindows
GetDesktopWindow
SetWindowLongW
MoveWindow
GetWindowLongW
GetCapture
SetCapture
DispatchMessageW
TranslateMessage
SetProcessDPIAware
MonitorFromWindow
LoadCursorW
ScreenToClient
ReleaseCapture
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
ReleaseDC
GetDC
GetForegroundWindow
RegisterClassExA
DefWindowProcA
gdi32
CreateRectRgn
GetDeviceCaps
DeleteObject
discord-rpc
Discord_Initialize
Discord_UpdatePresence
imm32
ImmReleaseContext
ImmAssociateContextEx
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext
dwmapi
DwmEnableBlurBehindWindow
DwmIsCompositionEnabled
DwmExtendFrameIntoClientArea
DwmGetColorizationColor
msvcp140d
?_Throw_C_error@std@@YAXH@Z
_Cnd_do_broadcast_at_thread_exit
_Thrd_detach
?_Xlength_error@std@@YAXPEBD@Z
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
?_Throw_Cpp_error@std@@YAXH@Z
d3d9
Direct3DCreate9Ex
vcruntime140d
__vcrt_LoadLibraryExW
__C_specific_handler_noexcept
__current_exception_context
__current_exception
__C_specific_handler
_CxxThrowException
__std_exception_destroy
__vcrt_GetModuleHandleW
strchr
strstr
memset
memmove
memcpy
memcmp
memchr
__std_exception_copy
__vcrt_GetModuleFileNameW
__std_type_info_destroy_list
vcruntime140_1d
__CxxFrameHandler4
ucrtbased
ceilf
atof
log
pow
atan2f
logf
powf
_invalid_parameter
wcslen
exit
_CrtDbgReport
tanf
__stdio_common_vsprintf_s
terminate
_time64
_beginthreadex
_CrtDbgReportW
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_callnewh
_seh_filter_exe
_set_app_type
__setusermatherr
strcpy
_initterm
_initterm_e
sinf
_set_fmode
__p___argc
__p___argv
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
strcpy_s
strcat_s
_wmakepath_s
_wsplitpath_s
wcscpy_s
toupper
__stdio_common_vsprintf
__stdio_common_vfprintf
fwrite
ftell
fseek
fread
fflush
fclose
_wfopen
__acrt_iob_func
_wassert
strncpy
strlen
strcmp
sqrtf
fmodf
fabs
qsort
malloc
acosf
floorf
__stdio_common_vsscanf
_exit
strncmp
_get_initial_narrow_environment
free
cosf
Sections
.textbss Size: - Virtual size: 621KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 777B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 373B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ