openttd_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

openttd_JC.exe
Size

11.9MB
MD5

1e1cb608a7175adaed9dc1db690453a0
SHA1

5eff252c8a13f8b14257e8bbf504bdb1b1dc6420
SHA256

00b184b0bea15f57a683c6124c32c3ad07cab6c569c7c050195fc0bb142362ea
SHA512

10bb62080370c5c4feddc75070fabb0e4eb0ebfc1aee76f32260caf1a0230654bb9e08b6bd07bc5a9735df29fe8b4cc231f4b6657887df5f975758fe870390bb
SSDEEP

98304:FR9FEm/Faco0fxZP5/goa3aVoktJGjLRv0X64fa:X9FEMFdo0fxZP5/goa3azHGya

Score

1^/10

Malware Config

Signatures

Files

openttd_JC.exe
.exe windows x64

11978c94543b1eaf89fd1c03d093aee8

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2018, 09:26

Not After

11/09/2023, 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:4b:e9:2c:2f:14:a4:ce:65:48:26:37:83:72:9c:e2
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

24/05/2021, 19:23

Not After

23/05/2024, 19:23

Subject

CN=OpenTTD Distribution LTD,O=OpenTTD Distribution LTD,L=Banchory,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

Issuer

CN=Certum Trusted Network CA,OU=Certum Certification Authority,O=Unizeto Technologies S.A.,C=PL

Not Before

11/09/2018, 09:26

Not After

11/09/2023, 09:26

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

76:4b:e9:2c:2f:14:a4:ce:65:48:26:37:83:72:9c:e2
Certificate

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Not Before

24/05/2021, 19:23

Not After

23/05/2024, 19:23

Subject

CN=OpenTTD Distribution LTD,O=OpenTTD Distribution LTD,L=Banchory,C=GB

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

64:33:51:d3:c7:38:9f:08
Certificate

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Not Before

24/06/2016, 20:44

Not After

24/06/2031, 20:44

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

21/09/2022, 00:00

Not After

21/11/2033, 23:59

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

b0:c1:bf:77:2f:d9:20:73:fa:57:41:4f:b3:7c:70:1b:f7:cb:d4:fb:fa:85:e0:ee:62:a6:5f:94:5f:01:7c:8b
Signer

Actual PE Digest

b0:c1:bf:77:2f:d9:20:73:fa:57:41:4f:b3:7c:70:1b:f7:cb:d4:fb:fa:85:e0:ee:62:a6:5f:94:5f:01:7c:8b

Digest Algorithm

sha256

PE Digest Matches

true

6b:ef:e0:e7:9f:11:53:ee:82:72:64:f8:ab:c8:e5:70:fc:a0:b2:c8
Signer

Actual PE Digest

6b:ef:e0:e7:9f:11:53:ee:82:72:64:f8:ab:c8:e5:70:fc:a0:b2:c8

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

opengl32

wglDeleteContext
wglGetProcAddress
wglMakeCurrent
wglCreateContext

ws2_32

sendto
getnameinfo
freeaddrinfo
accept
recvfrom
htons
connect
__WSAFDIsSet
select
send
recv
getsockopt
ioctlsocket
WSAIoctl
WSAGetLastError
WSACleanup
WSAStartup
bind
closesocket
listen
getaddrinfo
getpeername
getsockname
socket
ntohs
htonl
setsockopt

winmm

midiOutGetNumDevs
timeKillEvent
timeEndPeriod
waveOutWrite
waveOutUnprepareHeader
waveOutClose
waveOutReset
waveOutOpen
waveOutPrepareHeader
midiOutReset
midiOutClose
midiOutLongMsg
timeGetDevCaps
midiOutShortMsg
timeBeginPeriod
midiOutUnprepareHeader
midiOutOpen
midiOutPrepareHeader
midiOutGetDevCapsW
timeSetEvent
timeGetTime

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmGetProperty
ImmGetCompositionStringW
ImmSetCandidateWindow
ImmNotifyIME
ImmGetContext

usp10

ScriptItemize
ScriptBreak
ScriptLayout
ScriptGetLogicalWidths
ScriptPlace
ScriptShape
ScriptFreeCache

psapi

EnumProcessModules

kernel32

SetStdHandle
SetConsoleCtrlHandler
DeleteFileW
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
LoadLibraryExW
TlsFree
GetFileType
TlsGetValue
TlsAlloc
RtlUnwind
InterlockedFlushSList
InterlockedPushEntrySList
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetStartupInfoW
GetFileAttributesExW
SetFilePointerEx
WriteFile
DuplicateHandle
GetConsoleMode
ReadConsoleW
TlsSetValue
GetConsoleOutputCP
IsDebuggerPresent
ResetEvent
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetStringTypeW
GetCPInfo
ExpandEnvironmentStringsW
WaitForSingleObject
CreateEventW
Sleep
SetEvent
CloseHandle
FormatMessageW
FormatMessageA
ReadFile
RtlCaptureContext
GetCurrentProcess
GetModuleFileNameW
CreateFileW
GetCurrentThreadId
OpenProcess
FileTimeToSystemTime
GetCurrentThread
GetVersionExA
RaiseException
LoadLibraryW
GetProcAddress
ExitProcess
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
IsBadReadPtr
GetFileTime
SetUnhandledExceptionFilter
GetLocaleInfoW
GetLastError
FindFirstFileW
HeapAlloc
GetConsoleScreenBufferInfo
SetLastError
GetCommandLineW
GetFullPathNameW
FindNextFileW
SetConsoleScreenBufferSize
GetStdHandle
GetUserDefaultUILanguage
SetErrorMode
FindClose
GetFileAttributesW
GetLocaleInfoA
GetLogicalDriveStringsW
MultiByteToWideChar
GetDiskFreeSpaceExW
FreeConsole
GetCurrentDirectoryW
GlobalLock
WideCharToMultiByte
SetConsoleOutputCP
GetTickCount
GlobalUnlock
AllocConsole
CreateThread
VerSetConditionMask
VerifyVersionInfoW
LoadLibraryA
SetConsoleTitleW
CreateDirectoryW
InitializeSRWLock
CompareStringEx
CreateSymbolicLinkW
GetFileInformationByHandleEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
SleepConditionVariableCS
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetTempPathW
SetFileInformationByHandle
LCMapStringEx
GetLocaleInfoEx
LocalFree
DecodePointer
ReleaseSRWLockExclusive
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
QueryPerformanceFrequency
QueryPerformanceCounter
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
WaitForSingleObjectEx
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
HeapFree
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapReAlloc
GetFileSizeEx
FlushFileBuffers
GetTimeZoneInformation
SetEndOfFile
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
OutputDebugStringW
HeapSize
CompareStringW
WriteConsoleW

user32

GetKeyboardLayout
ShowCursor
GetWindowLongW
MapVirtualKeyW
DestroyWindow
MonitorFromWindow
EnumDisplayMonitors
CreateWindowExW
GetWindowLongPtrW
GetAsyncKeyState
ChangeDisplaySettingsW
DispatchMessageW
GetMonitorInfoW
ClientToScreen
PeekMessageW
RegisterClassW
ValidateRect
TrackMouseEvent
AdjustWindowRect
GetUpdateRect
TranslateMessage
LoadIconW
LoadCursorW
SetCapture
GetWindowDC
SetRectEmpty
SetRect
GetDesktopWindow
EnumDisplaySettingsW
SetCursorPos
OpenClipboard
CloseClipboard
GetClipboardData
IsClipboardFormatAvailable
ReleaseCapture
GetDC
ReleaseDC
DefWindowProcW
GetWindowRect
SetWindowPos
MessageBoxW
SetWindowLongPtrW
GetSystemMetrics
GetActiveWindow
ShowWindow
SetDlgItemTextW
SendDlgItemMessageW
GetDlgItem
DialogBoxParamW

gdi32

BitBlt
CreateDIBSection
SetDIBColorTable
RealizePalette
ChoosePixelFormat
SelectPalette
CreatePalette
SwapBuffers
SetPixelFormat
SetMapMode
AddFontResourceExW
SelectObject
CreateCompatibleDC
EnumFontFamiliesExW
GetTextCharsetInfo
DeleteDC
GetFontData
GetGlyphIndicesW
GetGlyphOutlineW
DeleteObject
CreateFontIndirectW
GetOutlineTextMetricsW
GetStockObject

shell32

SHGetFolderPathW
SHFileOperationW
ShellExecuteW

ole32

CoCreateInstance
CoUninitialize
CoInitializeEx

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

Sections

.text
Size: 9.2MB - Virtual size: 9.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 434KB - Virtual size: 26.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 493KB - Virtual size: 493KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

11978c94543b1eaf89fd1c03d093aee8

Code Sign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

76:4b:e9:2c:2f:14:a4:ce:65:48:26:37:83:72:9c:e2Certificate

Extended Key Usages

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1cCertificate

Key Usages

76:4b:e9:2c:2f:14:a4:ce:65:48:26:37:83:72:9c:e2Certificate

Extended Key Usages

Key Usages

64:33:51:d3:c7:38:9f:08Certificate

Extended Key Usages

Key Usages

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5aCertificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

b0:c1:bf:77:2f:d9:20:73:fa:57:41:4f:b3:7c:70:1b:f7:cb:d4:fb:fa:85:e0:ee:62:a6:5f:94:5f:01:7c:8bSigner

6b:ef:e0:e7:9f:11:53:ee:82:72:64:f8:ab:c8:e5:70:fc:a0:b2:c8Signer

Headers

DLL Characteristics

File Characteristics

Imports

opengl32

ws2_32

winmm

imm32

usp10

psapi

kernel32

user32

gdi32

shell32

ole32

advapi32

Sections

.text Size: 9.2MB - Virtual size: 9.2MB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 434KB - Virtual size: 26.6MB

.pdata Size: 493KB - Virtual size: 493KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 43KB - Virtual size: 42KB

.reloc Size: 51KB - Virtual size: 51KB

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

76:4b:e9:2c:2f:14:a4:ce:65:48:26:37:83:72:9c:e2
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

e4:27:04:95:f6:8c:91:d6:d0:ec:7b:49:4e:a4:df:1c
Certificate

76:4b:e9:2c:2f:14:a4:ce:65:48:26:37:83:72:9c:e2
Certificate

64:33:51:d3:c7:38:9f:08
Certificate

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

b0:c1:bf:77:2f:d9:20:73:fa:57:41:4f:b3:7c:70:1b:f7:cb:d4:fb:fa:85:e0:ee:62:a6:5f:94:5f:01:7c:8b
Signer

6b:ef:e0:e7:9f:11:53:ee:82:72:64:f8:ab:c8:e5:70:fc:a0:b2:c8
Signer

.text
Size: 9.2MB - Virtual size: 9.2MB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 434KB - Virtual size: 26.6MB

.pdata
Size: 493KB - Virtual size: 493KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 43KB - Virtual size: 42KB

.reloc
Size: 51KB - Virtual size: 51KB