219a9dd9168095af115edf65e5d5115ea3bc383287f23abbc23eb00afb75309d

Sharing

Copy URL Twitter E-mail

General

Target

219a9dd9168095af115edf65e5d5115ea3bc383287f23abbc23eb00afb75309d
Size

7.0MB
MD5

308a1a6c33e0d73bce68a8340123c171
SHA1

1a2c27b47708abae92e9b7695b3d94c62467eb6a
SHA256

219a9dd9168095af115edf65e5d5115ea3bc383287f23abbc23eb00afb75309d
SHA512

7732788ca4ebfcb4b44b07ec8552cdfd6b2fa76db95546eb3f40ef0e6cef1a694ffbf260aded2873b36a3e999b384d77cbeebb2fb56366728ad41bd13f4ca67f
SSDEEP

98304:hWeMnDN+56U8rYfRumh4/3U5jKEDB4+us:hWeMnDQ5/EIBh4s5zD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
219a9dd9168095af115edf65e5d5115ea3bc383287f23abbc23eb00afb75309d

Files

219a9dd9168095af115edf65e5d5115ea3bc383287f23abbc23eb00afb75309d
.exe windows x86

8d6deabef6e782b023e6a55ee8eb36d9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetCommandLineW
CreateDirectoryW
CreateFileW
SetFileAttributesW
FindFirstFileW
FindNextFileW
QueryPerformanceCounter
LCMapStringEx
DecodePointer
RaiseException
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MultiByteToWideChar
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetEnvironmentVariableA
WriteConsoleW
SetEndOfFile
SetStdHandle
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameA
GetTimeZoneInformation
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
GetFileType
GetStdHandle
GetOEMCP
GetACP
IsValidCodePage
GetCurrentThreadId
GetProcessHeap
GetModuleHandleExW
ExitProcess
GetTickCount
CloseHandle
FindClose
ReadFile
WriteFile
GetFileSize
Sleep
GetLastError
WideCharToMultiByte
OutputDebugStringW
OutputDebugStringA
GetSystemDefaultLangID
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetProcAddress
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineA
MoveFileExW
GetSystemTimeAsFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
FindFirstFileExW
GetFileAttributesExW
RemoveDirectoryW
GetCurrentDirectoryW
SetCurrentDirectoryW
SetEnvironmentVariableW
GetFullPathNameW
HeapSize
HeapReAlloc
HeapAlloc
GetCPInfo
IsProcessorFeaturePresent
DeleteFileW
RtlUnwind
HeapFree
EncodePointer
GetStringTypeW
lstrlenW

user32

GetDoubleClickTime
CopyRect
OffsetRect
SendMessageW
GetForegroundWindow

comdlg32

GetOpenFileNameW

shell32

SHFileOperationW
SHGetPathFromIDListW
SHGetFolderPathW
SHBrowseForFolderW
ShellExecuteW

ole32

CoTaskMemFree

shlwapi

StrCatW
StrCmpW
StrCpyW
StrCpyNW
PathRemoveFileSpecW
StrRChrW
StrChrW
PathFileExistsW
StrToIntExW
StrStrW
StrToIntW

lua5.1

lua_settop
lua_isnumber
lua_type
lua_tonumber
lua_pushnil
lua_pushstring
lua_gettable
lua_settable
lua_next
lua_close
lua_isstring
lua_tolstring
lua_pushnumber
lua_pushinteger
lua_getfield
lua_rawgeti
lua_pcall
luaL_openlibs
luaL_ref
luaL_loadfile
luaL_newstate
luaL_checklstring
luaL_checkinteger
lua_tointeger
lua_pushcclosure
lua_pushboolean
lua_setfield
lua_objlen

steam_api

SteamAPI_RunCallbacks
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallResult
SteamAPI_GetHSteamUser
SteamInternal_ContextInit
SteamInternal_FindOrCreateUserInterface
SteamAPI_Init
SteamAPI_Shutdown
SteamAPI_RestartAppIfNecessary

sdl2

SDL_isspace
SDL_wcslen
SDL_ShowSimpleMessageBox
SDL_Quit
SDL_Init
SDL_DestroyRenderer
SDL_GetRendererInfo
SDL_CreateRenderer
SDL_SetHint
SDL_DestroyWindow
SDL_SetWindowIcon
SDL_CreateWindow
SDL_RWFromFile
SDL_GetError
SDL_GetPerformanceFrequency
SDL_GetPerformanceCounter
SDL_DestroyTexture
SDL_UnlockTexture
SDL_LockTexture
SDL_iconv_string
SDL_malloc
SDL_GetKeyboardState
SDL_GetModState
SDL_GetScancodeFromKey
SDL_GetMouseState
SDL_GetDisplayBounds
SDL_RenderSetLogicalSize
SDL_free
SDL_memset
SDL_SetClipboardText
SDL_GetClipboardText
SDL_HasClipboardText
SDL_PollEvent
SDL_PushEvent
SDL_GetTicks
SDL_Delay
SDL_FreeSurface
SDL_CreateColorCursor
SDL_SetCursor
SDL_FreeCursor
SDL_ShowCursor
SDL_CreateTextureFromSurface
SDL_SetWindowBrightness
SDL_SetTextureColorMod
SDL_SetTextureAlphaMod
SDL_SetTextureBlendMode
SDL_SetRenderTarget
SDL_RenderSetClipRect
SDL_SetRenderDrawColor
SDL_SetRenderDrawBlendMode
SDL_RenderClear
SDL_RenderDrawLine
SDL_RenderDrawLines
SDL_RenderDrawRect
SDL_RenderFillRect
SDL_RenderCopy
SDL_RenderCopyEx
SDL_RenderPresent
SDL_LockSurface
SDL_UnlockSurface
SDL_GetColorKey
SDL_GetSurfaceColorMod
SDL_GetSurfaceAlphaMod
SDL_GetSurfaceBlendMode
SDL_CreateTexture
SDL_QueryTexture
SDL_UpdateTexture
SDL_SetMainReady

sdl2_image

IMG_Load
IMG_Quit
IMG_Init
IMG_LoadTexture

sdl2_mixer

Mix_FreeMusic
Mix_LoadMUS
Mix_LoadWAV_RW
Mix_OpenAudio
Mix_Quit
Mix_CloseAudio
Mix_VolumeMusic
Mix_VolumeChunk
Mix_Volume
Mix_PlayMusic
Mix_PlayChannelTimed
Mix_Init
Mix_FreeChunk
Mix_ResumeMusic
Mix_PauseMusic
Mix_HaltChannel
Mix_HookMusicFinished

sdl2_ttf

TTF_Quit
TTF_Init
TTF_CloseFont
TTF_RenderGlyph_Blended
TTF_OpenFont
TTF_FontHeight
TTF_GlyphIsProvided
TTF_GlyphMetrics
TTF_GetFontKerningSizeGlyphs
TTF_SizeUNICODE

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 669KB - Virtual size: 669KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.0MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 567KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8d6deabef6e782b023e6a55ee8eb36d9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

comdlg32

shell32

ole32

shlwapi

lua5.1

steam_api

sdl2

sdl2_image

sdl2_mixer

sdl2_ttf

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rdata Size: 669KB - Virtual size: 669KB

.data Size: 2.0MB - Virtual size: 2.6MB

.rsrc Size: 81KB - Virtual size: 80KB

.reloc Size: 568KB - Virtual size: 567KB

.text
Size: 3.7MB - Virtual size: 3.7MB

.rdata
Size: 669KB - Virtual size: 669KB

.data
Size: 2.0MB - Virtual size: 2.6MB

.rsrc
Size: 81KB - Virtual size: 80KB

.reloc
Size: 568KB - Virtual size: 567KB