GLP_installer_900223152_com[.]activision[.]callofduty[.]shooter[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
GLP_installer_900223152_com.activision.callofduty.shooter.exe
Size 3.6MB
Sample230330-s99hjadc74
SHA256 7ecdc16e03587b4e6537ae7f4ec76a112a3cf5723a2442ce90e249cf90b6f763
MD5 18dc7d5427e825674a5d0f25322dcd3b
SHA1 0a3ad457820214a6390bf26ec5f28cfb8c4d5489
SHA512 f644f083b23ee99f7466c2179f9431ec2addef2c506af8d6a658578e0b45cc2546040d069953a3ba5e532d60c65a20d4dea297aa72cad337a96421eae954da9a
SSDEEP 49152:+08OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYR1nm7LBw:+08vdsGaQNgS1C6eznukqS
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

GLP_installer_900223152_com.activision.callofduty.shooter.exe

.exe 3.6MB

GLP_installer_900223152_com.activision.callofduty.shooter.exe

IMPHASH 0e2b0c48d5c7e0af756a1d45ad1efe66
SHA256 7ecdc16e03587b4e6537ae7f4ec76a112a3cf5723a2442ce90e249cf90b6f763
MD5 18dc7d5427e825674a5d0f25322dcd3b
SHA1 0a3ad457820214a6390bf26ec5f28cfb8c4d5489
SHA512 f644f083b23ee99f7466c2179f9431ec2addef2c506af8d6a658578e0b45cc2546040d069953a3ba5e532d60c65a20d4dea297aa72cad337a96421eae954da9a
SSDEEP 49152:+08OhxtUg9OUi82w6aQp9dgS1GUL38XhCOYc3iJXe9emEPGKOPkQThMYR1nm7LBw:+08vdsGaQNgS1C6eznukqS
MD5 SHA1 SHA512 SSDEEP

windows x86

Digest

6e:7c:dd:2e:05:53:76:32:99:cc:75:f1:ce:8d:e1:9b:85:ae:b0:e3:9b:b8:47:89:70:84:c9:93:d4:a4:65:3e

Digest Algorithm

sha256

PE Digests Matches

Trusted

PE Signature issue

Digest

67:5b:62:fe:f0:88:76:1d:fb:62:34:4b:8f:31:ff:14:cb:06:68:07

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Serial Number

0e:33:12:30:52:5a:25:a7:f8:10:e5:34:88:b0:aa:40

Issuer

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 25, 2020 - Feb 22, 2024

Subject

CN=DigiCert Assured ID Code Signing CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0f:a8:49:06:15:d7:00:a0:be:21:76:fd:c5:ec:6d:bd

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Feb 11, 2011 - Feb 10, 2026

Subject

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

04:09:18:1b:5f:d5:bb:66:75:53:43:b5:6f:95:50:08

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Oct 22, 2013 - Oct 22, 2028

Subject

CN=Tencent Technology(Shenzhen) Company Limited,O=Tencent Technology(Shenzhen) Company Limited,L=Shenzhen,ST=Guangdong Province,C=CN

Serial Number

0e:a7:f6:86:bc:40:35:4a:70:f2:c2:97:c1:31:5e:f6

Issuer

CN=DigiCert SHA2 Assured ID Code Signing CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Timespan

Nov 25, 2020 - Feb 22, 2024

Subject

CN=DigiCert Timestamp 2021,O=DigiCert\, Inc.,C=US

Serial Number

0d:42:4a:e0:be:3a:88:ff:60:40:21:ce:14:00:f0:dd

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 1, 2021 - Jan 6, 2031

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Timespan

Jan 7, 2016 - Jan 7, 2031

Minor OS version

Major OS version

Entry point

2231268

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

psapi

GetModuleFileNameExA

ws2_32

htons WSAStartup WSAGetLastError WSACleanup gethostbyname closesocket setsockopt ioctlsocket __WSAFDIsSet select shutdown connect recv send htonl ntohl socket

kernel32

UnmapViewOfFile EnterCriticalSection LeaveCriticalSection DuplicateHandle SetErrorMode TerminateProcess RaiseException GetFileTime GetCurrentDirectoryW SetCurrentDirectoryW GetTempPathW GetFileAttributesW GetFileSizeEx TerminateThread FreeResource GetUserDefaultUILanguage DecodePointer ProcessIdToSessionId OpenMutexW CreateMutexW GetLogicalDrives GetDriveTypeW DeviceIoControl FindFirstFileW RemoveDirectoryW MoveFileExW FindNextFileW FindClose GetExitCodeProcess IsDBCSLeadByte GetFullPathNameW SetEndOfFile SetFilePointerEx CopyFileW CreateFileA SwitchToThread CreateDirectoryA GetPrivateProfileIntA GetPrivateProfileStringA GetVersionExW LoadLibraryA GetSystemDefaultLangID OpenProcess SleepEx CreateMutexA AreFileApisANSI TryEnterCriticalSection HeapCreate GetDiskFreeSpaceW OutputDebugStringA LockFile GetFullPathNameA UnlockFileEx HeapValidate GetTempPathA FormatMessageW GetDiskFreeSpaceA GetFileAttributesA FlushViewOfFile WaitForSingleObjectEx GetVersionExA DeleteFileA HeapCompact UnlockFile CreateFileMappingA LocalFree LockFileEx SystemTimeToFileTime GetSystemTimeAsFileTime GetSystemTime FormatMessageA QueryPerformanceCounter FlushFileBuffers GetStdHandle GetFileType GetModuleHandleA GlobalMemoryStatus FlushConsoleInputBuffer MulDiv GetACP lstrlenW GlobalUnlock ExitProcess VerifyVersionInfoW VerSetConditionMask CreateDirectoryW MapViewOfFile LocalFileTimeToFileTime GlobalAlloc lstrcpyW lstrcmpiW IsValidCodePage SetStdHandle GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetTimeFormatW GetDateFormatW GetConsoleCP ReadConsoleW SetEnvironmentVariableA SetConsoleMode ReadConsoleInputA GetConsoleMode SetConsoleCtrlHandler GetModuleHandleExW ExitThread FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe RtlUnwind UnregisterWaitEx QueryDepthSList InterlockedFlushSList InterlockedPushEntrySList InterlockedPopEntrySList ReleaseSemaphore VirtualProtect VirtualFree VirtualAlloc LoadLibraryExW FreeLibraryAndExitThread GetThreadTimes UnregisterWait RegisterWaitForSingleObject SetThreadAffinityMask GetProcessAffinityMask GetNumaHighestNodeNumber DeleteTimerQueueTimer ChangeTimerQueueTimer CreateTimerQueueTimer GetLogicalProcessorInformation GetThreadPriority SetThreadPriority CreateThread SignalObjectAndWait CreateTimerQueue InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent UnhandledExceptionFilter ResetEvent IsDebuggerPresent LCMapStringW CompareStringW GetCPInfo TlsFree TlsSetValue TlsGetValue TlsAlloc SetLastError QueryPerformanceFrequency FindFirstFileExW GetNativeSystemInfo GetExitCodeThread GetCurrentThread GetStringTypeW EncodePointer SetUnhandledExceptionFilter InitializeCriticalSection GetCurrentProcessId GetModuleFileNameA GetSystemDirectoryW CreateFileMappingW GetEnvironmentVariableW GetLocaleInfoW GetPrivateProfileSectionW GetPrivateProfileIntW GetPrivateProfileStringW GetCommandLineW GetSystemInfo GetDiskFreeSpaceExW GlobalMemoryStatusEx OutputDebugStringW DeleteCriticalSection InitializeCriticalSectionAndSpinCount LoadLibraryW FreeLibrary InterlockedExchangeAdd GetTickCount GetFileAttributesExW GetLocalTime GetModuleFileNameW InterlockedDecrement InterlockedIncrement MoveFileW DeleteFileW SetFilePointer SetEvent WaitForSingleObject CreateEventW FindResourceExW FindResourceW LoadResource LockResource SizeofResource WideCharToMultiByte Sleep InterlockedExchange InterlockedCompareExchange GetProcessHeap HeapAlloc HeapFree HeapReAlloc HeapSize HeapDestroy GetCurrentThreadId GlobalFree MultiByteToWideChar GetCurrentProcess GetFileSize WriteFile ReadFile GetLastError GetModuleHandleW GetProcAddress CreateFileW CloseHandle GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW WriteConsoleW GlobalLock

user32

wsprintfW EnumDisplayDevicesW GetDC MonitorFromWindow GetMonitorInfoW ReleaseDC DestroyWindow DefWindowProcW GetSystemMetrics MessageBoxW InvalidateRgn GetWindowTextW GetWindowTextLengthW SetWindowTextW IsWindowEnabled InvalidateRect IsWindow GetProcessWindowStation GetUserObjectInformationW MessageBoxA IsRectEmpty IntersectRect PtInRect SetCursor LoadCursorW CharNextW CreateAcceleratorTableW InflateRect UnionRect SendMessageW GetWindowRect ScreenToClient GetKeyState GetClientRect SetWindowPos GetWindowLongW SetWindowLongW IsIconic GetActiveWindow GetWindow SetFocus BeginPaint EndPaint GetUpdateRect IsWindowVisible MapWindowPoints CreateWindowExW GetCursorPos ReleaseCapture GetSysColor GetMessageW DestroyMenu TrackPopupMenu EnableMenuItem AppendMenuW TranslateMessage DispatchMessageW IsZoomed PostMessageW GetFocus SetTimer KillTimer SetCapture GetParent LoadImageW SetWindowRgn ShowWindow EnableWindow PostQuitMessage RegisterClassW GetClassInfoExW RegisterClassExW GetGUIThreadInfo SetForegroundWindow MapVirtualKeyExW GetKeyboardLayout OffsetRect CallWindowProcW SetPropW CreatePopupMenu GetCaretBlinkTime ClientToScreen SetCaretPos GetCaretPos GetKeyNameTextW GetPropW HideCaret ShowCaret CreateCaret GetWindowRgn UpdateLayeredWindow EqualRect FillRect DrawTextW SetRect CharPrevW MoveWindow

gdi32

CreateRectRgnIndirect GetClipBox SelectClipRgn CreateRoundRectRgn PlayEnhMetaFile GetEnhMetaFileHeader CreateDIBitmap AddFontMemResourceEx GetTextMetricsW CloseEnhMetaFile CreateEnhMetaFileW SetWindowOrgEx Rectangle RestoreDC BitBlt SaveDC StretchBlt CreateCompatibleDC DeleteDC ExtSelectClipRgn CreatePen CreateFontIndirectW GetStockObject GetObjectW GetObjectA DeleteObject CreateCompatibleBitmap GetDeviceCaps SetStretchBltMode CreatePatternBrush CreateSolidBrush CreatePenIndirect MoveToEx LineTo RoundRect GetBitmapBits SetBitmapBits CombineRgn RemoveFontMemResourceEx CreateDIBSection SetBkMode SetTextColor SetBkColor GetCharABCWidthsW GetTextExtentPoint32W TextOutW GdiFlush CreateRectRgn SelectObject PtInRegion

advapi32

CryptAcquireContextW RegOpenKeyExA RegDeleteKeyW RegCreateKeyExW RegEnumKeyExW RegSetValueExW RegQueryValueExW RegOpenKeyExW RegCloseKey ReportEventA RegisterEventSourceA DeregisterEventSource CryptReleaseContext CryptGenRandom RegQueryValueExA

shell32

SHBrowseForFolderW DragQueryFileW SHGetFolderPathA ord165 ShellExecuteExW SHGetSpecialFolderPathW SHCreateDirectoryExW CommandLineToArgvW SHGetPathFromIDListW SHChangeNotify

ole32

RegisterDragDrop DoDragDrop OleDuplicateData CoInitialize CoCreateInstance CoUninitialize CoInitializeEx CoTaskMemFree CoCreateGuid ReleaseStgMedium OleLockRunning CLSIDFromString CLSIDFromProgID CreateStreamOnHGlobal

comctl32

ord17 _TrackMouseEvent

gdiplus

GdipSetStringFormatLineAlign GdipSetStringFormatAlign GdipSetStringFormatFlags GdipSetStringFormatTrimming GdipDeleteStringFormat GdipTranslateWorldTransform GdipCloneStringFormat GdipSetInterpolationMode GdipSetSmoothingMode GdipSetTextRenderingHint GdipDeleteFont GdipCreateFontFromLogfontA GdipCreateFontFromDC GdipDrawRectangleI GdipSetPenMode GdipMeasureString GdipCreatePen1 GdipFillRectangleI GdipDeleteBrush GdipCreateSolidFill GdipDeleteGraphics GdipCreateFromHDC GdipDisposeImage GdipCloneImage GdipAlloc GdipFree GdipLoadImageFromStream GdiplusShutdown GdiplusStartup GdipDeletePen GdipDrawString GdipDrawImageRectI GdipRotateWorldTransform GdipStringFormatGetGenericTypographic

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionWindow

winhttp

WinHttpReceiveResponse WinHttpWriteData WinHttpSetOption WinHttpSendRequest WinHttpQueryHeaders WinHttpGetIEProxyConfigForCurrentUser WinHttpAddRequestHeaders WinHttpOpenRequest WinHttpConnect WinHttpCrackUrl WinHttpQueryDataAvailable WinHttpReadData WinHttpGetProxyForUrl WinHttpSetTimeouts WinHttpCloseHandle WinHttpOpen

shlwapi

PathFileExistsW PathRemoveFileSpecW PathAddBackslashW PathRemoveFileSpecA PathIsDirectoryW

d3d9

Direct3DCreate9

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

netapi32

Netbios

Name

.text

Size

2.5MB

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

529KB

Virtual Size

529KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

64KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.QMGuid

Size

512B

Virtual Size

20B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

371KB

Virtual Size

370KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

117KB

Virtual Size

117KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ