prog[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

prog.exe
Size

1.3MB
MD5

00e916648327a3069f77309e9f62259b
SHA1

80751fc1baea0694d37c8d7f2a19d53c4c32dfb8
SHA256

4c53a7e83b5b12088dee3cc6d8477aca7e7fbfb82550eaab3a14e7ab877b1fe8
SHA512

c364bc78ad7d5cc890bae87295b12d4ddb1eaec6acab65cea17c3952982c6f4fc14197c6b02cb6edc174abe64c020504e44382001179cb392a7b647213504fe1
SSDEEP

24576:7W/yicvUcVvfcVncyqzDJGg08mgWSpc90UPfK+XZpqW+V5jvPovoi8tcx/bn4hIC:biCW87WSpcCRW+/ovwt4z0+aXn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
prog.exe

Files

prog.exe
.exe windows x86

28d6a919adaddd44ad8d2a41f5898554

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetCommandLineW
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_mkdir
_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_assert
_beginthreadex
_cexit
_endthreadex
_errno
_flsbuf
_fpreset
_fullpath
_iob
_isctype
_onexit
_pctype
_setjmp
_setmode
_snprintf
abort
asctime
atan2
atexit
atof
atoi
calloc
clock
exit
fclose
fflush
floor
fmod
fopen
fprintf
fputc
fread
free
fseek
ftell
fwrite
getenv
ldexp
localeconv
localtime
longjmp
malloc
mbstowcs
memcpy
memmove
memset
perror
pow
printf
puts
qsort
realloc
remove
setlocale
signal
sin
sprintf
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strerror
strlen
strncat
strncmp
strncpy
strrchr
strstr
strtol
system
time
tolower
toupper
vfprintf
vsprintf
wcslen
wcstombs

opengl32

glBindTexture
glBlendFunc
glClear
glClearColor
glColorPointer
glDeleteTextures
glDisable
glDisableClientState
glDrawElements
glEnable
glEnableClientState
glGenTextures
glGetError
glLoadIdentity
glMatrixMode
glOrtho
glScalef
glTexCoordPointer
glTexImage2D
glTexParameteri
glVertexPointer
glViewport

sdl2

SDL_CreateThread
SDL_CreateWindow
SDL_Delay
SDL_DestroyWindow
SDL_GL_CreateContext
SDL_GL_GetDrawableSize
SDL_GL_MakeCurrent
SDL_GL_SetAttribute
SDL_GL_SwapWindow
SDL_GameControllerAddMappingsFromRW
SDL_GameControllerClose
SDL_GameControllerEventState
SDL_GameControllerGetAttached
SDL_GameControllerGetAxis
SDL_GameControllerGetJoystick
SDL_GameControllerOpen
SDL_GetClipboardText
SDL_GetDisplayBounds
SDL_GetDisplayMode
SDL_GetNumDisplayModes
SDL_GetTicks
SDL_GetVersion
SDL_GetWindowSize
SDL_HasClipboardText
SDL_Init
SDL_IsGameController
SDL_JoystickClose
SDL_JoystickGetAttached
SDL_JoystickGetAxis
SDL_JoystickInstanceID
SDL_JoystickName
SDL_JoystickNumAxes
SDL_JoystickNumButtons
SDL_JoystickOpen
SDL_NumJoysticks
SDL_PollEvent
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromFile
SDL_SetClipboardText
SDL_SetHint
SDL_SetMainReady
SDL_SetWindowFullscreen
SDL_SetWindowPosition
SDL_SetWindowSize
SDL_SetWindowTitle
SDL_ShowCursor
SDL_StartTextInput
SDL_iconv_string
SDL_isspace
SDL_malloc
SDL_wcslen

sdl2_mixer

Mix_CloseAudio
Mix_FreeMusic
Mix_LoadMUS
Mix_OpenAudio
Mix_Pause
Mix_PauseMusic
Mix_PlayMusic
Mix_RegisterEffect
Mix_Resume
Mix_ResumeMusic
Mix_RewindMusic
Mix_SetMusicPosition
Mix_VolumeMusic

steam_wrapper

steam_api_init
steam_api_persona_name
steam_api_set_achievement
steam_api_store_stats

Sections

.text
Size: 821KB - Virtual size: 821KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/91
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

28d6a919adaddd44ad8d2a41f5898554

Headers

File Characteristics

Imports

kernel32

msvcrt

opengl32

sdl2

sdl2_mixer

steam_wrapper

Sections

.text Size: 821KB - Virtual size: 821KB

.data Size: 2KB - Virtual size: 1KB

.rdata Size: 72KB - Virtual size: 71KB

/4 Size: 149KB - Virtual size: 148KB

.bss Size: - Virtual size: 4.4MB

.idata Size: 6KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

/14 Size: 512B - Virtual size: 152B

/29 Size: 19KB - Virtual size: 19KB

/41 Size: 2KB - Virtual size: 1KB

/55 Size: 2KB - Virtual size: 1KB

/67 Size: 512B - Virtual size: 160B

/80 Size: 4KB - Virtual size: 4KB

/91 Size: 512B - Virtual size: 160B

.text
Size: 821KB - Virtual size: 821KB

.data
Size: 2KB - Virtual size: 1KB

.rdata
Size: 72KB - Virtual size: 71KB

/4
Size: 149KB - Virtual size: 148KB

.bss
Size: - Virtual size: 4.4MB

.idata
Size: 6KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

/14
Size: 512B - Virtual size: 152B

/29
Size: 19KB - Virtual size: 19KB

/41
Size: 2KB - Virtual size: 1KB

/55
Size: 2KB - Virtual size: 1KB

/67
Size: 512B - Virtual size: 160B

/80
Size: 4KB - Virtual size: 4KB

/91
Size: 512B - Virtual size: 160B