Static task
static1
Behavioral task
behavioral1
Sample
5742e777491e42cf16360d20f05bde9a338659abfecd421a9bdd3bcf070f8c92.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
5742e777491e42cf16360d20f05bde9a338659abfecd421a9bdd3bcf070f8c92.exe
Resource
win10v2004-20230703-en
General
-
Target
5742e777491e42cf16360d20f05bde9a338659abfecd421a9bdd3bcf070f8c92
-
Size
7.0MB
-
MD5
9ecd80001928b1d311cf451b4ee5c9e4
-
SHA1
34e1021200e338a12adb19bf7617547c8e098ea8
-
SHA256
5742e777491e42cf16360d20f05bde9a338659abfecd421a9bdd3bcf070f8c92
-
SHA512
a35ffd69457c8dd912ac397f0c99d24d684fc164085946939dc4064c8f06ab8a646b7c79985539d901a7aeec488531904779dd4246e1ce693d80e9b6b0ef0593
-
SSDEEP
98304:Q7iJNz1752RXBCkzK2PcZ5GmDVQOqG8mO:Q7iJNzx52RxBm20Z5GIGOZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5742e777491e42cf16360d20f05bde9a338659abfecd421a9bdd3bcf070f8c92
Files
-
5742e777491e42cf16360d20f05bde9a338659abfecd421a9bdd3bcf070f8c92.exe windows x86
8d6deabef6e782b023e6a55ee8eb36d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
GetCommandLineW
CreateDirectoryW
CreateFileW
SetFileAttributesW
FindFirstFileW
FindNextFileW
QueryPerformanceCounter
LCMapStringEx
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MultiByteToWideChar
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetEnvironmentVariableA
WriteConsoleW
SetEndOfFile
SetStdHandle
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
GetTimeZoneInformation
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetFileType
GetStdHandle
GetOEMCP
GetACP
IsValidCodePage
GetCurrentThreadId
GetProcessHeap
GetModuleHandleExW
ExitProcess
GetTickCount
CloseHandle
FindClose
ReadFile
WriteFile
GetFileSize
Sleep
GetLastError
WideCharToMultiByte
OutputDebugStringW
OutputDebugStringA
GetSystemDefaultLangID
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
MoveFileExW
GetSystemTimeAsFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
GetFileAttributesExW
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
GetFullPathNameW
HeapSize
HeapReAlloc
HeapAlloc
GetCPInfo
IsProcessorFeaturePresent
DeleteFileW
RtlUnwind
HeapFree
EncodePointer
GetStringTypeW
lstrlenW
user32
GetDoubleClickTime
CopyRect
OffsetRect
SendMessageW
GetForegroundWindow
comdlg32
GetOpenFileNameW
shell32
SHFileOperationW
SHGetPathFromIDListW
SHGetFolderPathW
SHBrowseForFolderW
ShellExecuteW
ole32
CoTaskMemFree
shlwapi
StrCatW
StrCmpW
StrCpyW
StrCpyNW
PathRemoveFileSpecW
StrRChrW
StrChrW
PathFileExistsW
StrToIntExW
StrStrW
StrToIntW
lua5.1
lua_settop
lua_isnumber
lua_type
lua_tonumber
lua_pushnil
lua_pushstring
lua_gettable
lua_settable
lua_next
lua_close
lua_isstring
lua_tolstring
lua_pushnumber
lua_pushinteger
lua_getfield
lua_rawgeti
lua_pcall
luaL_openlibs
luaL_ref
luaL_loadfile
luaL_newstate
luaL_checklstring
luaL_checkinteger
lua_tointeger
lua_pushcclosure
lua_pushboolean
lua_setfield
lua_objlen
steam_api
SteamAPI_RunCallbacks
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallResult
SteamAPI_GetHSteamUser
SteamInternal_ContextInit
SteamInternal_FindOrCreateUserInterface
SteamAPI_Init
SteamAPI_Shutdown
SteamAPI_RestartAppIfNecessary
sdl2
SDL_isspace
SDL_wcslen
SDL_ShowSimpleMessageBox
SDL_Quit
SDL_Init
SDL_DestroyRenderer
SDL_GetRendererInfo
SDL_CreateRenderer
SDL_SetHint
SDL_DestroyWindow
SDL_SetWindowIcon
SDL_CreateWindow
SDL_RWFromFile
SDL_GetError
SDL_GetPerformanceFrequency
SDL_GetPerformanceCounter
SDL_DestroyTexture
SDL_UnlockTexture
SDL_LockTexture
SDL_iconv_string
SDL_malloc
SDL_GetKeyboardState
SDL_GetModState
SDL_GetScancodeFromKey
SDL_GetMouseState
SDL_GetDisplayBounds
SDL_RenderSetLogicalSize
SDL_free
SDL_memset
SDL_SetClipboardText
SDL_GetClipboardText
SDL_HasClipboardText
SDL_PollEvent
SDL_PushEvent
SDL_GetTicks
SDL_Delay
SDL_FreeSurface
SDL_CreateColorCursor
SDL_SetCursor
SDL_FreeCursor
SDL_ShowCursor
SDL_CreateTextureFromSurface
SDL_SetWindowBrightness
SDL_SetTextureColorMod
SDL_SetTextureAlphaMod
SDL_SetTextureBlendMode
SDL_SetRenderTarget
SDL_RenderSetClipRect
SDL_SetRenderDrawColor
SDL_SetRenderDrawBlendMode
SDL_RenderClear
SDL_RenderDrawLine
SDL_RenderDrawLines
SDL_RenderDrawRect
SDL_RenderFillRect
SDL_RenderCopy
SDL_RenderCopyEx
SDL_RenderPresent
SDL_LockSurface
SDL_UnlockSurface
SDL_GetColorKey
SDL_GetSurfaceColorMod
SDL_GetSurfaceAlphaMod
SDL_GetSurfaceBlendMode
SDL_CreateTexture
SDL_QueryTexture
SDL_UpdateTexture
SDL_SetMainReady
sdl2_image
IMG_Load
IMG_Quit
IMG_Init
IMG_LoadTexture
sdl2_mixer
Mix_FreeMusic
Mix_LoadMUS
Mix_LoadWAV_RW
Mix_OpenAudio
Mix_Quit
Mix_CloseAudio
Mix_VolumeMusic
Mix_VolumeChunk
Mix_Volume
Mix_PlayMusic
Mix_PlayChannelTimed
Mix_Init
Mix_FreeChunk
Mix_ResumeMusic
Mix_PauseMusic
Mix_HaltChannel
Mix_HookMusicFinished
sdl2_ttf
TTF_Quit
TTF_Init
TTF_CloseFont
TTF_RenderGlyph_Blended
TTF_OpenFont
TTF_FontHeight
TTF_GlyphIsProvided
TTF_GlyphMetrics
TTF_GetFontKerningSizeGlyphs
TTF_SizeUNICODE
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 669KB - Virtual size: 669KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.0MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 568KB - Virtual size: 567KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ