Static task
static1
Behavioral task
behavioral1
Sample
Game.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Game.exe
Resource
win10v2004-20230703-en
General
-
Target
Game.exe
-
Size
6.1MB
-
MD5
f28effb344123f6cd043abee46546731
-
SHA1
b0dc46e1fdbeb7efc356bcb5261d8f86f61cc46b
-
SHA256
1b45ad68fc1c33b75746ea1266ffa430a2f5476cf08c2198154e1bacba76a819
-
SHA512
53e72d07976757a98d7660e8e6601f96cf033f6a56100640b0986a8318dadc3b48833d2993ebc4170c40713a35cfe3ba871d45cd2bc3f8212b16eb2091b88b57
-
SSDEEP
196608:fhU7fckDNI54bpR20CkvegyKXkUC8tY4BY5ed:20kveg5UU1LRd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Game.exe
Files
-
Game.exe.exe windows x86
10c912430da88c9e9f5f4f379221082e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathIsDirectoryA
kernel32
lstrlenA
CreateFileA
GetLastError
WriteFile
FlushFileBuffers
InitializeCriticalSection
GetDiskFreeSpaceExA
RaiseException
GetFileAttributesA
FindNextFileW
FindFirstFileW
GetExitCodeThread
Sleep
CloseHandle
RemoveDirectoryA
CopyFileA
DeleteFileA
GlobalLock
GlobalUnlock
GlobalAlloc
lstrcpyA
GetModuleFileNameA
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
FindClose
SetCurrentDirectoryA
CreateDirectoryA
GetTickCount
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
GetModuleFileNameW
LoadLibraryW
GetProcAddress
FreeLibrary
lstrlenW
DeleteCriticalSection
VirtualProtect
GetFileSize
GetTempFileNameW
ReleaseSemaphore
CreateSemaphoreA
lstrcpynW
MulDiv
lstrcpyW
lstrcmpW
GetThreadPriority
RtlUnwind
ExitProcess
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetModuleHandleA
TerminateProcess
GetCurrentProcess
MoveFileA
MultiByteToWideChar
ExitThread
GetCurrentThreadId
CreateThread
GetStartupInfoA
GetCommandLineA
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
QueryPerformanceCounter
GetCurrentProcessId
EnterCriticalSection
LeaveCriticalSection
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetTimeZoneInformation
UnhandledExceptionFilter
VirtualQuery
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
SetStdHandle
SetCurrentDirectoryW
GetSystemInfo
SetEndOfFile
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedIncrement
InterlockedDecrement
ResetEvent
WaitForSingleObject
CreateEventA
SetEvent
CreateFileW
DeleteFileW
GetTempPathW
GlobalSize
GlobalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
GetVersionExW
QueryPerformanceFrequency
OutputDebugStringW
GlobalMemoryStatus
GetLocalTime
GetProcessHeap
SetThreadPriority
SuspendThread
ResumeThread
GetCurrentDirectoryW
WaitForMultipleObjects
user32
MessageBoxA
SetFocus
ShowWindow
SetWindowPos
GetWindowRect
CreateDialogParamA
SetMenu
SetWindowTextW
SetClassLongW
LoadIconW
SystemParametersInfoW
UpdateWindow
SetWindowRgn
SendMessageW
GetMenuItemInfoW
GetMenuItemCount
PostMessageW
ShowCursor
SetCursorPos
MessageBoxW
GetClientRect
FillRect
ChangeDisplaySettingsA
SetForegroundWindow
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
SetActiveWindow
AdjustWindowRectEx
SetWindowLongW
DrawMenuBar
MoveWindow
DefWindowProcW
SetCursor
PostQuitMessage
EndPaint
BeginPaint
DestroyMenu
BringWindowToTop
RegisterClassExW
LoadCursorW
GetWindowLongW
FindWindowW
UnregisterClassW
UnhookWindowsHookEx
GetDesktopWindow
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
IsDialogMessageW
PeekMessageW
KillTimer
GetMonitorInfoW
EnumDisplaySettingsW
GetKeyboardState
PostThreadMessageA
GetQueueStatus
RegisterWindowMessageA
MsgWaitForMultipleObjects
GetDC
ReleaseDC
GetCursorPos
MonitorFromPoint
EnumDisplayMonitors
GetMonitorInfoA
CharNextA
ClientToScreen
ClipCursor
GetSystemMetrics
SendMessageA
GetAsyncKeyState
IsClipboardFormatAvailable
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DestroyWindow
GetDlgItem
GetScrollPos
SendDlgItemMessageA
gdi32
AddFontResourceExA
RemoveFontResourceExA
DeleteObject
CombineRgn
CreateRectRgn
GetObjectA
DeleteDC
SelectObject
CreateCompatibleDC
CreateDIBSection
GetStockObject
CreateSolidBrush
SetDIBitsToDevice
StretchDIBits
CreateDCW
Rectangle
GetGlyphOutlineW
GetTextMetricsA
GetObjectW
CreateFontW
SetBkMode
SetBkColor
SetTextColor
GetCharacterPlacementW
TextOutW
GetTextExtentPoint32W
EnumFontFamiliesExW
GetDeviceCaps
shell32
ShellExecuteA
DragAcceptFiles
DragFinish
DragQueryFileW
DragQueryFileA
wininet
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
winmm
timeGetTime
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 604KB - Virtual size: 602KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.8MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ