Static task
static1
Behavioral task
behavioral1
Sample
Battlefront.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Battlefront.exe
Resource
win10v2004-20230220-en
General
-
Target
Battlefront.exe
-
Size
3.2MB
-
MD5
dc5dc9273fb956e419cc452555039aa2
-
SHA1
eeadb1cce6083c3ccb003ce56d0dd2fe086fda42
-
SHA256
01df4c378427ae2f8cd7fb83dd67b74786beccc72287825f0bf9ccfad3802720
-
SHA512
2178ad7e8211e4f89fdf525d7feba027427213777461fd56a061d01ba479dfe12277a8324d74d867936353c6a64e0254a426e050a81cb7487b92a7e744086979
-
SSDEEP
98304:j/sb3v7OA/9tpl8njHK2oMqCa/3qQCUmBtY:j/sb3jOAVtpl8nIMql/3qQC7Bt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Battlefront.exe
Files
-
Battlefront.exe.exe windows x86
c7bf70722a3f52e2e76a6d7956f1ddec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
d3d9
Direct3DCreate9
ws2_32
accept
listen
__WSAFDIsSet
htonl
gethostname
getsockopt
WSACleanup
getsockname
recv
shutdown
select
inet_addr
gethostbyname
send
sendto
socket
setsockopt
connect
WSAGetLastError
bind
ioctlsocket
htons
closesocket
WSAStartup
ntohs
ntohl
recvfrom
inet_ntoa
kernel32
SetEndOfFile
SetStdHandle
GetLocaleInfoA
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeA
RaiseException
Sleep
QueryPerformanceCounter
QueryPerformanceFrequency
GetTickCount
CreateThread
GetUserDefaultLangID
SetThreadPriority
GetThreadPriority
GetCurrentThread
DeleteFileA
FindClose
FindFirstFileA
CloseHandle
CreateFileA
SleepEx
GetLastError
CreateMutexA
GetVolumeInformationA
GetDriveTypeA
GetLocalTime
FreeLibrary
CompareStringA
InterlockedExchange
GetModuleHandleA
SetEnvironmentVariableA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
SetLastError
GetSystemInfo
GetProcAddress
OutputDebugStringA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
FlushFileBuffers
LCMapStringA
VirtualQuery
VirtualAlloc
VirtualProtect
GetTimeZoneInformation
HeapSize
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThreadId
CreateDirectoryA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
HeapReAlloc
GetCommandLineA
GetStartupInfoA
GetModuleFileNameA
HeapFree
HeapAlloc
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
GetCurrentProcess
TerminateProcess
GetFullPathNameA
FindNextFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitProcess
RtlUnwind
SetHandleCount
IsProcessorFeaturePresent
InterlockedDecrement
InterlockedIncrement
WriteFile
ReadFile
GetFileSize
SetFilePointer
GetDiskFreeSpaceA
WaitForSingleObject
CreateSemaphoreA
ReleaseSemaphore
GetVersionExA
user32
ShowWindow
GetFocus
SetWindowPos
GetForegroundWindow
SetCursorPos
GetCursorPos
ToAscii
GetKeyState
GetKeyboardState
MapVirtualKeyA
SystemParametersInfoA
ToUnicode
GetDlgItem
EndDialog
SetWindowTextA
FindWindowA
LoadIconA
RegisterClassA
SetRect
AdjustWindowRect
GetDesktopWindow
GetClientRect
CreateWindowExA
GetDC
SendMessageA
GetMenu
DestroyMenu
DestroyWindow
PostQuitMessage
DefWindowProcA
PeekMessageA
DispatchMessageA
TranslateMessage
SetCursor
DialogBoxParamA
LoadCursorA
PostMessageA
gdi32
GetStockObject
GetDeviceGammaRamp
SetICMMode
advapi32
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
binkw32
_BinkSetIOSize@4
_BinkSetSoundSystem@8
_BinkClose@4
_BinkOpen@8
_BinkSetIO@4
_BinkDX9SurfaceType@4
_BinkDoFrame@4
_BinkSetMemory@8
_BinkNextFrame@4
_BinkSetVolume@12
_BinkCopyToBuffer@28
_BinkOpenDirectSound@4
_BinkWait@4
dsound
ord11
dinput8
DirectInput8Create
winmm
timeGetTime
ole32
CoCreateInstance
CoUninitialize
CoInitialize
Sections
.text Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 312KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 268KB - Virtual size: 24.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ