Static task
static1
Behavioral task
behavioral1
Sample
SlayTheSpire.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
SlayTheSpire.exe
Resource
win10v2004-20230220-en
General
-
Target
SlayTheSpire.exe
-
Size
364KB
-
MD5
e9061c7339782046aee895b677eb55e4
-
SHA1
e3fe2c144d74fbd49dcdfb5b43a6f51349847270
-
SHA256
44b8eacfd3843a8666e980dc9c71a50a069ef58610fb134464d1b606434c9603
-
SHA512
1599159b17708c1293dbf26f9983edc4d93a9a86342fa9aa9f00196a47b499e39d68316c1a2c16a107c38457fe3ad64fa697ffcb9af81b62164c2067130d2df2
-
SSDEEP
6144:X481kFZEDs1LPz2IhxrMTdKfyJqG72Uhmz:X4kkbtBrwJqGSU4
Malware Config
Signatures
Files
-
SlayTheSpire.exe.exe windows x64
f989c928273d400087cbc35d49f01fb9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetLastError
GetProcAddress
LocalFree
FormatMessageA
LoadLibraryA
FreeConsole
AllocConsole
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
GetStringTypeW
ExitProcess
GetModuleHandleExW
AreFileApisANSI
HeapFree
RtlPcToFileHeader
RaiseException
RtlLookupFunctionEntry
RtlUnwindEx
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetCommandLineA
HeapAlloc
HeapReAlloc
GetCPInfo
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
IsProcessorFeaturePresent
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
IsDebuggerPresent
GetStdHandle
WriteFile
GetModuleFileNameW
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetProcessHeap
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
GetFileType
ReadFile
SetFilePointerEx
GetCurrentThreadId
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
SetStdHandle
WriteConsoleW
ReadConsoleW
CreateFileW
SetEndOfFile
Sections
.text Size: 169KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ