Static task
static1
Behavioral task
behavioral1
Sample
game.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
game.exe
Resource
win10v2004-20230220-en
General
-
Target
game.exe
-
Size
7.5MB
-
MD5
f3805fe96e124ddff57d8f7c72a89fc5
-
SHA1
0f3daf1d97dcefc9e87a0020e74e7972f5f364bb
-
SHA256
968ff74c0830098616b9f1ec49718c4992b5d404e6306e2326b73f10739d1869
-
SHA512
79b4899c8b6c1253b20a6c8edb01a25074156807077786bdb7ef44ddd758a608921834ad09ccd45098b45bb1c419c2994cd4e2b3c238297f0a4e61e5b62103b3
-
SSDEEP
196608:4e90grIFvXvwcql09IwPvHz2S/6KoW92j99w9WDI0xBF5:4tgrI1XvwIIs3/6KoW92j99w9WDnx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource game.exe
Files
-
game.exe.exe windows x86
7d4c89c8a3e2ce3541040b9b023e83df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineW
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
GetModuleFileNameW
WaitForSingleObject
OutputDebugStringA
WriteConsoleW
HeapSize
SetEndOfFile
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
GetConsoleCP
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
HeapReAlloc
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
CreateDirectoryW
GetStringTypeW
DecodePointer
HeapAlloc
HeapFree
ReadConsoleW
GetConsoleMode
GetACP
GetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
PeekNamedPipe
GetFileType
GetFileInformationByHandle
CreateFileW
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
FindClose
GetModuleHandleExW
ExitProcess
WideCharToMultiByte
GetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
GetFullPathNameA
GetDriveTypeW
ReadFile
EncodePointer
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlUnwind
ResumeThread
SetThreadPriority
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExpandEnvironmentStringsA
FormatMessageA
MulDiv
LocalAlloc
GlobalFree
CloseHandle
Sleep
GetVersionExA
lstrcmpiA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThread
GetSystemInfo
GetTickCount
SetThreadAffinityMask
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalMemoryStatus
MultiByteToWideChar
GetFullPathNameW
SetErrorMode
VirtualAlloc
VirtualFree
GetSystemTimeAsFileTime
GetSystemTimeAdjustment
GetLastError
SleepEx
SetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileA
WriteFile
GetTempPathA
user32
LoadIconA
MessageBoxA
SendMessageA
RegisterClassA
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplaySettingsA
ChangeDisplaySettingsA
LoadImageA
DispatchMessageA
PeekMessageA
SendMessageTimeoutA
SendMessageTimeoutW
DefWindowProcA
PostQuitMessage
RegisterClassExA
CreateWindowExA
DestroyWindow
ShowWindow
MoveWindow
SetWindowPos
GetWindowPlacement
GetActiveWindow
GetFocus
TranslateMessage
ToAscii
MapVirtualKeyA
GetCapture
SetCapture
ReleaseCapture
GetSystemMetrics
UpdateWindow
SetActiveWindow
SetForegroundWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
GetClientRect
GetWindowRect
AdjustWindowRect
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
FillRect
SetWindowLongA
LoadCursorA
GetKeyboardState
advapi32
RegQueryValueExA
RegOpenKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
shell32
CommandLineToArgvW
ShellExecuteExW
shlwapi
PathRelativePathToA
opengl32
glDisableClientState
glDrawArrays
glDrawElements
glEnable
glEnableClientState
glEnd
glFlush
glFogf
glFogfv
glFogi
glFrontFace
glGetBooleanv
glGetError
glGetFloatv
glGetString
glHint
glLightModelfv
glLightModeli
wglCreateContext
wglDeleteContext
wglGetProcAddress
wglMakeCurrent
glAlphaFunc
glBegin
glBindTexture
glBlendFunc
glClear
glClearColor
glClearDepth
glClipPlane
glColor4ub
glColorMask
glColorPointer
glCullFace
glDepthFunc
glDepthMask
glLightf
glTexSubImage2D
glTexImage2D
glGetTexImage
glGenTextures
glDeleteTextures
glCopyTexSubImage2D
glGetIntegerv
glViewport
glVertexPointer
glVertex3f
glVertex2i
glVertex2f
glTranslatef
glTexParameteri
glTexParameterf
glTexGeni
glTexEnvi
glTexEnvf
glTexCoordPointer
glTexCoord2f
glStencilOp
glStencilMask
glStencilFunc
glShadeModel
glScissor
glRectf
glReadPixels
glReadBuffer
glPushMatrix
glPushAttrib
glPopMatrix
glPopAttrib
glPolygonOffset
glPolygonMode
glPointSize
glPixelStorei
glNormalPointer
glMatrixMode
glMaterialfv
glMaterialf
glLoadMatrixf
glLoadIdentity
glLineWidth
glLightfv
glDisable
wsock32
WSAGetLastError
recv
send
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
WSACleanup
socket
__WSAFDIsSet
select
WSASetLastError
accept
listen
recvfrom
sendto
inet_ntoa
gethostname
closesocket
setsockopt
WSAStartup
ws2_32
freeaddrinfo
getaddrinfo
winmm
waveOutPrepareHeader
waveOutWrite
waveOutOpen
timeEndPeriod
timeBeginPeriod
waveOutClose
waveOutUnprepareHeader
waveOutReset
gdi32
GetPixelFormat
DescribePixelFormat
ChoosePixelFormat
TextOutW
GetObjectA
SetTextColor
SetWindowExtEx
SetViewportExtEx
StretchDIBits
SetMapMode
SetPixelFormat
SelectObject
SetPixel
SetBkMode
GetStockObject
Rectangle
GetTextExtentPoint32W
GetDIBits
GetDeviceCaps
DeleteObject
DeleteDC
CreatePen
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
SwapBuffers
ole32
CoCreateInstance
CoInitialize
CoUninitialize
Sections
.text Size: 3.2MB - Virtual size: 3.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 580KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 151KB - Virtual size: 158KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ