FarCry2[.]exe | Triage

General

Target

FarCry2.exe
Size

34KB
MD5

e9dba2342e6e52dc203d7c3fda20c47d
SHA1

e6e9f0b5577a8341eab4110688ade3bba8585595
SHA256

872175868a1e4addb7979d0a556ff7a118eb2f8b63bb5d07d6e4db4890ce97c7
SHA512

9b2e64d0ce235eb12f7bcb3c4d559349ccc4201f814cb847cd506957e40988cabf957e7ffc05b85ff64d698dee9991f0a8774ebf7fb483a83c32dd3242cb7390
SSDEEP

384:TMUcRFGBlTMTS6GiQKvXINcgPBf+IY5UXcz++vX9Y3K3wHjYOoAhADMmu0gD6Lhy:QPREjkeYvXrgZWIYeXZ+v29DXmuL

Score

1^/10

Malware Config

Signatures

Files

FarCry2.exe
.exe windows x86

2efea9eb53482a81b9b494421f871f2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnhandledExceptionFilter
GetCurrentProcessId
OpenEventA
CloseHandle
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

user32

SendMessageA

dunia

GetExePath
RegisterGameFunctionProvider
?RunGame@@YA_NPAUHINSTANCE__@@PBD@Z
AddFunctionCB

msvcr80

_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
exit
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
fopen
fread
fclose
sprintf
_adjust_fdiv

Exports

Exports

Sections

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.1911
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2efea9eb53482a81b9b494421f871f2c

Headers

File Characteristics

Imports

kernel32

user32

dunia

msvcr80

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 16KB - Virtual size: 20KB

.1911 Size: 1KB - Virtual size: 1KB

.text
Size: 3KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 16KB - Virtual size: 20KB

.1911
Size: 1KB - Virtual size: 1KB