Static task
static1
General
-
Target
INSECT.HAZARD.rar
-
Size
314.1MB
-
MD5
eaa3ee31e219a4565f4c5d09e039dd51
-
SHA1
63014064a0b717c77cd46ad329289a9943bf5554
-
SHA256
7070808b67d721ea2475f05f4884a5d82078db14805af1509194026d95aa8d8d
-
SHA512
b0b8981b80fb1b7f8212bfa773d0e68e6ce2f24fcaa3c693dbb9485c31a7c4b57e1b3d624950cc9733713a44ad8110f0cc6925adca59650c2efed3fad24d8598
-
SSDEEP
6291456:8zSLaEXkwHnO4PjoNrehJpCHAigcYECpGCh/knEDoMxj63+yCZ54kyAUr/KgD6X9:eSLfXnHnJPjoo/CgigcvCpDFDBa+rubG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/INSECT.HAZARD/INSECT.HAZARD/Game.exe
Files
-
INSECT.HAZARD.rar.rar
-
INSECT.HAZARD/GAMESTORRENT.CO.url.url
-
INSECT.HAZARD/IGG-GAMES.COM.url.url
-
INSECT.HAZARD/INSECT.HAZARD/Cheat.pdf.pdf
-
INSECT.HAZARD/INSECT.HAZARD/Cheat.txt
-
INSECT.HAZARD/INSECT.HAZARD/Explanation/01.png.png
-
INSECT.HAZARD/INSECT.HAZARD/Explanation/02.png.png
-
INSECT.HAZARD/INSECT.HAZARD/Explanation/03.png.png
-
INSECT.HAZARD/INSECT.HAZARD/Explanation/04.png.png
-
INSECT.HAZARD/INSECT.HAZARD/Explanation/05.png.png
-
INSECT.HAZARD/INSECT.HAZARD/GAMESTORRENT.CO.url.url
-
INSECT.HAZARD/INSECT.HAZARD/Game.exe.exe windows x86
faac987cca0c4b64dfdd5177ceabbd32
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
Sleep
FindClose
CloseHandle
GetModuleFileNameW
CreateProcessW
GetCommandLineW
GetTempPathW
GetTempFileNameW
SetCurrentDirectoryW
CreateDirectoryW
RemoveDirectoryW
FindFirstFileW
FindNextFileW
CreateFileW
GetLastError
ReadFile
WriteFile
SetFilePointer
WideCharToMultiByte
MultiByteToWideChar
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
DeleteFileW
SetEnvironmentVariableW
GetCurrentDirectoryW
GetCommandLineA
HeapAlloc
EncodePointer
DecodePointer
RtlUnwind
HeapCompact
HeapReAlloc
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LCMapStringW
WriteConsoleW
user32
LoadStringW
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
wsprintfW
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
INSECT.HAZARD/INSECT.HAZARD/IGG-GAMES.COM.url.url
-
INSECT.HAZARD/INSECT.HAZARD/Manual.pdf.pdf
-
INSECT.HAZARD/INSECT.HAZARD/Manual.txt
-
INSECT.HAZARD/INSECT.HAZARD/README.txt
-
INSECT.HAZARD/README.txt