Static task
static1
General
-
Target
Game.exe
-
Size
10.2MB
-
MD5
b93fd70d6589bf9d513e7e22bb5e5edd
-
SHA1
a84920f063e2dcf651315e05a45ee31a0591e236
-
SHA256
59f8355c535a967b706081fb532da257a8c72fe501e00a25107133a19c8fd5bf
-
SHA512
8225823681a5e93b60d5bb98b2c556186d8e536d2983c6b5db75547e00c98ea49cf7a98ca0128f1fd5ecd9dfb0e2f5df4b54b23cc6d6cdaa6fba807ce0d21520
-
SSDEEP
49152:CrJbbWNbRaktjhlVr+C5pJQcibJSTEYqH2q7DlO2W:gOzaCjv8C5pJQpNfFDlOb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Game.exe
Files
-
Game.exe.exe windows x86
480fa8c7a07eaf698788d31c28cccc0a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetCommandLineW
GetTickCount
GetLocalTime
GetSystemTime
SetEndOfFile
WriteConsoleW
CreateFileW
FlushFileBuffers
SetFilePointerEx
GetConsoleCP
ReadConsoleW
GetConsoleMode
HeapQueryInformation
HeapSize
HeapReAlloc
GetStringTypeW
SetStdHandle
WaitForSingleObjectEx
OutputDebugStringW
SetConsoleCtrlHandler
GetProcessHeap
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FindClose
DecodePointer
GetCurrentThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentDirectoryA
OutputDebugStringA
CreateDirectoryA
CloseHandle
GetLastError
CreateMutexA
QueryPerformanceFrequency
GetModuleHandleA
RaiseException
RtlUnwind
EncodePointer
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetModuleFileNameW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetACP
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
ReadFile
HeapFree
HeapAlloc
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
DeleteFileW
user32
DispatchMessageA
TranslateMessage
DefWindowProcA
ClipCursor
GetSystemMetrics
SendInput
GetWindowInfo
GetCursorPos
GetMessageA
PeekMessageA
LoadIconA
LoadCursorA
SetWindowLongA
SetCursor
MessageBoxA
AdjustWindowRect
GetWindowRect
GetActiveWindow
SetWindowPos
ShowWindow
DestroyWindow
CreateWindowExA
RegisterClassExA
GetClientRect
SetCursorPos
shell32
CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetPathFromIDListA
bink2w32
_BinkWait@4
_BinkClose@4
_BinkCopyToBuffer@28
_BinkNextFrame@4
_BinkShouldSkip@4
_BinkUtilCPUs@0
_BinkStartAsyncThread@8
_BinkDoFrameAsyncMulti@12
_BinkSetVolume@12
_BinkOpen@8
_BinkOpenXAudio2@4
_BinkSetSoundSystem@8
_BinkWaitStopAsyncThreadsMulti@8
_BinkRequestStopAsyncThreadsMulti@8
_BinkDoFrameAsyncWait@8
advapi32
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ole32
StringFromIID
CoInitialize
CoSetProxyBlanket
CoInitializeEx
CoUninitialize
CoCreateInstance
oleaut32
SysFreeString
SysAllocString
d3d9
Direct3DCreate9Ex
d3dx9_43
D3DXCompileShader
dinput8
DirectInput8Create
winmm
timeBeginPeriod
steam_api
SteamUtils
SteamUserStats
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamAPI_Shutdown
SteamAPI_Init
SteamAPI_RunCallbacks
SteamUser
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 468KB - Virtual size: 468KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8.1MB - Virtual size: 46.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 572B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 93KB - Virtual size: 93KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.bind Size: 138KB - Virtual size: 138KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ