AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
hx_cffi
Static task
static1
General
-
Target
PapersPlease.exe
-
Size
11.5MB
-
MD5
503bf5b8fefd351bfb23a3fc1278d183
-
SHA1
5d66f25f03b9c95e3455c1c5a113df8d35ee092d
-
SHA256
936e5af2c7f01f7a03782bda924d912d51e7f4df69a3371a4416305375bc71b4
-
SHA512
667221deb3306338e2cca4a533f32cb3038066eec8656263b4e5439be8bf21ca9e37f5357c3a7c29573e6b8b9a26d88f195cd2ac01be289d417aa175780a7bac
-
SSDEEP
98304:Ng3eGQMvLFQYHPJqiJhpv87vrZ5TUoeOgOhJxAT1qW:6xPvLpHRH76rfgOh4
Score
N/A
Malware Config
Signatures
Files
-
PapersPlease.exe.exe windows x64
1aa16e8426cca162d2a1e37a36ffe1c2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
user32
MessageBoxA
kernel32
UnhandledExceptionFilter
HeapSize
WriteConsoleW
GetProcessHeap
GetCommandLineW
FindNextFileA
FindFirstFileExA
SetEndOfFile
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
GetFileAttributesExW
FlushFileBuffers
GetFullPathNameW
HeapReAlloc
GetStringTypeW
GetTimeZoneInformation
TlsGetValue
DeleteFileW
FreeLibrary
GetProcAddress
LoadLibraryA
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTime
SystemTimeToFileTime
TlsSetValue
TlsAlloc
CloseHandle
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetCurrentThreadId
RtlCaptureContext
LoadLibraryW
GetCommandLineA
SetCurrentDirectoryW
GetCurrentDirectoryW
FindClose
FindFirstFileW
FindNextFileW
GetFileAttributesW
Sleep
GetCurrentProcess
GetCurrentProcessId
GetModuleFileNameW
ReadFile
WriteFile
DuplicateHandle
CreatePipe
TerminateProcess
GetExitCodeProcess
CreateProcessW
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
RaiseException
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
CreateFileW
GetDriveTypeW
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
SetStdHandle
CreateDirectoryW
SetFilePointerEx
GetModuleFileNameA
GetStdHandle
GetACP
GetConsoleMode
ReadConsoleW
GetConsoleCP
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
Exports
Exports
Sections
.text Size: 8.1MB - Virtual size: 8.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 540KB - Virtual size: 600KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 350KB - Virtual size: 349KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 198KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ