factorio[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

factorio.exe
Size

29.7MB
MD5

0775c6784586b0ff04a1b5bb3c93053f
SHA1

128c591ffbb502c9a53571dd5638f2df9894bcd7
SHA256

84f0c6e095c4f4d0478bef006a0fe1f1554525b9ddd07264a645cef0e5989a1f
SHA512

efb6304a59048a789d48c5f6d6196e43de4260c62bf9a139210017b0d536b228c33aa4f3dc91f464974d48d822f3e97e5fb2f2eaf172a8c068437626c4c5f3df
SSDEEP

196608:q3Jf4t4ltpXM7cJ96hinKydQqQUK6mK1NdYLiiBNeW0sKSu2su6yR+HbyyutWy+K:XCYcX6MldQqq6mKVhJsmUljl6x2t

Score

1^/10

Malware Config

Signatures

Files

factorio.exe
.exe windows x64

c6103a8cdf4ceee644e337d978ec9ed3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

steam_api64

SteamInternal_ContextInit
SteamAPI_RunCallbacks
SteamInternal_FindOrCreateUserInterface
SteamAPI_UnregisterCallResult
SteamAPI_Init
SteamAPI_RestartAppIfNecessary
SteamAPI_RegisterCallback
SteamAPI_RegisterCallResult
SteamAPI_GetHSteamUser
SteamAPI_Shutdown
SteamAPI_UnregisterCallback

dnsapi

DnsFree
DnsQuery_UTF8

wldap32

ord211
ord32
ord35
ord30
ord50
ord301
ord22
ord46
ord45
ord143
ord60
ord217
ord41
ord33
ord79
ord200
ord27
ord26

gdi32

CreateDCW
GetICMProfileW
CreateFontIndirectW
GetTextMetricsW
CreateCompatibleDC
GetTextExtentPoint32A
GetDeviceGammaRamp
SetDeviceGammaRamp
CreateBitmap
DeleteObject
CreateDIBSection
CombineRgn
CreateRectRgn
GetDIBits
CreateCompatibleBitmap
SetPixelFormat
GetPixelFormat
SwapBuffers
ChoosePixelFormat
DescribePixelFormat
BitBlt
StretchDIBits
SetPixel
GetRegionData
SetDCBrushColor
SelectObject
GetStockObject
GetDeviceCaps
Rectangle
DeleteDC

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx
CoTaskMemFree
PropVariantClear
CoInitialize

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime

psapi

GetModuleFileNameExA
GetModuleFileNameExW
EnumProcessModules
GetProcessMemoryInfo
GetPerformanceInfo
GetModuleInformation

gdiplus

GdipGetImageWidth
GdipSaveImageToStream
GdipCreateBitmapFromScan0
GdipGetImageEncoders
GdiplusStartup
GdiplusShutdown
GdipGetImageHeight
GdipCloneImage
GdipBitmapUnlockBits
GdipGetImageEncodersSize
GdipBitmapLockBits
GdipFree
GdipDisposeImage
GdipAlloc
GdipCreateBitmapFromStream

shell32

SHOpenFolderAndSelectItems
DragFinish
SHGetFolderPathW
ord155
ShellExecuteA
ExtractIconExW
ShellExecuteW
ord190
DragAcceptFiles
DragQueryFileW

shlwapi

ord12
PathFindOnPathA

user32

DestroyWindow
SetWindowPos
SetActiveWindow
CreateWindowExW
SendMessageW
RemovePropW
SetWindowTextW
ShowWindow
RegisterClassW
AttachThreadInput
CreateIconFromResource
UnhookWindowsHookEx
SetLayeredWindowAttributes
IntersectRect
SetPropW
SetWindowsHookExW
FlashWindowEx
SetWindowLongW
GetParent
PtInRect
SetForegroundWindow
GetWindowTextW
GetDesktopWindow
GetDC
SetWindowLongPtrW
EndDialog
GetWindowLongPtrW
DialogBoxIndirectParamW
SetFocus
SystemParametersInfoA
GetDlgItem
DrawTextW
SystemParametersInfoW
ReleaseDC
GetDoubleClickTime
MapVirtualKeyW
GetKeyboardState
ToUnicode
RegisterWindowMessageA
GetWindowLongW
GetMessageW
DefWindowProcW
AdjustWindowRectEx
GetFocus
GetMessageExtraInfo
CallWindowProcW
PostMessageW
GetWindowRect
GetMenu
GetPropW
ScreenToClient
CallNextHookEx
GetSystemMetrics
UnregisterClassW
RegisterClassExW
GetAsyncKeyState
DispatchMessageW
SetTimer
DestroyIcon
ClientToScreen
PeekMessageW
GetRawInputData
ValidateRect
TrackMouseEvent
GetClipCursor
IsRectEmpty
GetUpdateRect
TranslateMessage
LoadIconW
ClipCursor
SetCursor
GetClientRect
KillTimer
GetClassInfoExW
GetWindowTextLengthW
InvalidateRect
IsIconic
GetCursorPos
GetClipboardData
IsClipboardFormatAvailable
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
EnumDisplayDevicesA
MessageBoxW
MonitorFromWindow
EnumDisplayMonitors
MapVirtualKeyA
MessageBoxA
GetMonitorInfoA
EnumDisplaySettingsA
GetWindowThreadProcessId
SetCursorPos
ReleaseCapture
SetCapture
LoadCursorW
RegisterRawInputDevices
CreateIconIndirect
CopyImage
SetWindowRgn
EnumDisplaySettingsW
EnumDisplayDevicesW
GetMonitorInfoW
ChangeDisplaySettingsExW
GetClipboardSequenceNumber
LoadCursorA
EndPaint
BeginPaint
PostThreadMessageW
GetWindowInfo
GetCapture
GetUpdateRgn
GetKeyState
RegisterWindowMessageW
ChangeWindowMessageFilter
GetForegroundWindow

imm32

ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmSetCandidateWindow
ImmGetCompositionStringW
ImmAssociateContext

oleaut32

SysFreeString

kernel32

GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
GetStartupInfoW
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
InitializeSListHead
ResetEvent
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
SetThreadAffinityMask
VirtualProtect
VirtualFree
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
RtlUnwindEx
SetConsoleCtrlHandler
ExitThread
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetDriveTypeW
SetEnvironmentVariableW
GetConsoleMode
ReadConsoleW
VirtualAlloc
RegisterWaitForSingleObject
GetConsoleOutputCP
GetCommandLineW
HeapAlloc
HeapFree
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
HeapReAlloc
GetTimeZoneInformation
SetStdHandle
HeapSize
IsValidCodePage
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
GetStringTypeW
QueueUserWorkItem
IsProcessorFeaturePresent
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
DuplicateHandle
EncodePointer
RtlPcToFileHeader
MoveFileExW
CopyFileW
CreateDirectoryExW
AreFileApisANSI
SetFileAttributesW
RemoveDirectoryW
GetFullPathNameW
GetFileInformationByHandle
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileExW
FindClose
CreateDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
ReadProcessMemory
GetThreadContext
GetVersionExA
GetFileAttributesA
ResumeThread
GetCurrentDirectoryA
SuspendThread
RtlCaptureContext
CreateFileA
MoveFileExA
PeekNamedPipe
GetSystemDirectoryA
VerifyVersionInfoA
SleepEx
SetLastError
FormatMessageA
OutputDebugStringA
CreateEventA
CreateWaitableTimerA
SetEvent
WaitForMultipleObjects
SetWaitableTimer
CreateSemaphoreA
InitializeCriticalSection
GetCommandLineA
GetTempPathW
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
CreateSemaphoreW
ReleaseSemaphore
GetSystemPowerStatus
GetModuleHandleExW
CreateEventW
CreateThread
WaitForSingleObjectEx
SetThreadPriority
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
TryEnterCriticalSection
MulDiv
LoadLibraryW
LoadLibraryExW
QueryPerformanceCounter
OutputDebugStringW
ExitProcess
GetTickCount
SetFilePointerEx
SetFilePointer
SetErrorMode
WriteFile
GetFileSizeEx
ReadFile
SetEnvironmentVariableA
GetEnvironmentVariableA
MultiByteToWideChar
WideCharToMultiByte
GlobalUnlock
GlobalLock
GlobalAlloc
SetUnhandledExceptionFilter
IsDebuggerPresent
OpenThread
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEndOfFile
WriteConsoleW
LoadLibraryA
AllocConsole
WriteConsoleInputA
GetFileType
SetConsoleOutputCP
Process32First
GetConsoleScreenBufferInfo
SetConsoleActiveScreenBuffer
GetCurrentProcess
SetConsoleScreenBufferSize
GetStdHandle
TerminateProcess
GetModuleFileNameW
LockFile
CreateConsoleScreenBuffer
InitializeCriticalSectionEx
WaitForSingleObject
CreateFileW
GetFileAttributesW
GetCurrentThreadId
GetVersionExW
HeapValidate
GetModuleHandleA
FindFirstChangeNotificationW
OpenProcess
CreateToolhelp32Snapshot
Sleep
GetModuleHandleExA
FormatMessageW
GetLastError
AttachConsole
GetFileAttributesExW
GetCurrentThread
FindCloseChangeNotification
RtlUnwind
QueryPerformanceFrequency
DeleteFileW
Process32Next
CloseHandle
RaiseException
FindNextChangeNotification
DecodePointer
UnlockFile
GetProcAddress
LocalFree
DeleteCriticalSection
VerSetConditionMask
GetCurrentProcessId
GetProcessHeap
GlobalMemoryStatusEx
SetThreadExecutionState
GetModuleHandleW
FreeLibrary
VerifyVersionInfoW

advapi32

CryptDestroyKey
GetUserNameA
CryptEncrypt
CryptImportKey
CryptGenRandom
CryptAcquireContextA
CryptCreateHash
CryptHashData
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam

iphlpapi

GetIpAddrTable

ws2_32

getpeername
getsockname
getsockopt
socket
ntohs
connect
WSAAddressToStringW
recvfrom
recv
WSACleanup
__WSAFDIsSet
accept
bind
closesocket
send
WSAStartup
getaddrinfo
listen
WSASetLastError
WSAIoctl
ioctlsocket
gethostname
htonl
htons
freeaddrinfo
sendto
setsockopt
WSAGetLastError
ntohl
select

crypt32

CertFreeCertificateChainEngine
CertAddCertificateContextToStore
CertFindExtension
CertCreateCertificateChainEngine
CertGetNameStringW
CryptVerifyMessageSignature
CryptQueryObject
CertFreeCertificateChain
CertGetNameStringA
CryptDecodeObjectEx
PFXImportCertStore
CertGetCertificateChain
CertFreeCertificateContext
CryptStringToBinaryA
CertEnumCertificatesInStore
CertCloseStore
CertFindCertificateInStore
CertOpenStore

dsound

ord12
ord11

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

wintrust

WinVerifyTrust

imagehlp

ImageEnumerateCertificates
ImageGetCertificateHeader
ImageGetCertificateData

Exports

Exports

AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_buffinitsize
luaL_callmeta
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_checkunsigned
luaL_checkversion_
luaL_error
luaL_execresult
luaL_fileresult
luaL_getmetafield
luaL_getsubtable
luaL_gsub
luaL_len
luaL_loadbufferx
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlib
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_optunsigned
luaL_prepbuffsize
luaL_pushmodule
luaL_pushresult
luaL_pushresultsize
luaL_ref
luaL_requiref
luaL_setfuncs
luaL_setmetatable
luaL_testudata
luaL_tolstring
luaL_traceback
luaL_unref
luaL_where
lua_absindex
lua_arith
lua_atpanic
lua_callk
lua_checkstack
lua_close
lua_compare
lua_concat
lua_copy
lua_createtable
lua_dump
lua_error
lua_gc
lua_getallocf
lua_getctx
lua_getfield
lua_getglobal
lua_gethook
lua_gethookcount
lua_gethookmask
lua_getinfo
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettop
lua_getupvalue
lua_getuservalue
lua_insert
lua_iscfunction
lua_isnumberorstringconvertabletonumber
lua_isstringornumberconvertabletostring
lua_isuserdata
lua_len
lua_load
lua_newstate
lua_newthread
lua_newuserdata
lua_next
lua_pcallk
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushthread
lua_pushunsigned
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawgetp
lua_rawlen
lua_rawset
lua_rawseti
lua_rawsetp
lua_remove
lua_replace
lua_setallocf
lua_setfield
lua_setglobal
lua_sethook
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_setuservalue
lua_status
lua_toboolean
lua_tocfunction
lua_tointegerx
lua_tolstring
lua_tonumberx
lua_topointer
lua_tothread
lua_tounsignedx
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_version
lua_xmove

Sections

.text
Size: 20.4MB - Virtual size: 20.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 704KB - Virtual size: 912KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 784KB - Virtual size: 784KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gehcont
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 416KB - Virtual size: 415KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6103a8cdf4ceee644e337d978ec9ed3

Headers

DLL Characteristics

File Characteristics

Imports

steam_api64

dnsapi

wldap32

gdi32

ole32

winmm

psapi

gdiplus

shell32

shlwapi

user32

imm32

oleaut32

kernel32

advapi32

iphlpapi

ws2_32

crypt32

dsound

version

wintrust

imagehlp

Exports

Exports

Sections

.text Size: 20.4MB - Virtual size: 20.4MB

.rdata Size: 7.4MB - Virtual size: 7.4MB

.data Size: 704KB - Virtual size: 912KB

.pdata Size: 784KB - Virtual size: 784KB

.gehcont Size: 512B - Virtual size: 40B

.rsrc Size: 39KB - Virtual size: 39KB

.reloc Size: 416KB - Virtual size: 415KB

.text
Size: 20.4MB - Virtual size: 20.4MB

.rdata
Size: 7.4MB - Virtual size: 7.4MB

.data
Size: 704KB - Virtual size: 912KB

.pdata
Size: 784KB - Virtual size: 784KB

.gehcont
Size: 512B - Virtual size: 40B

.rsrc
Size: 39KB - Virtual size: 39KB

.reloc
Size: 416KB - Virtual size: 415KB