f087633f44faebb978c4391ef4e06d0001799f3ebb9b9d004d729aa0a789dbac

Sharing

Copy URL Twitter E-mail

General

Target

f087633f44faebb978c4391ef4e06d0001799f3ebb9b9d004d729aa0a789dbac
Size

1.0MB
MD5

5673d47169494b3f9f8f031af076cbe7
SHA1

82715cdcd744b02f7365079a97d5667189e220ce
SHA256

f087633f44faebb978c4391ef4e06d0001799f3ebb9b9d004d729aa0a789dbac
SHA512

98548948f05e90a87289313762f8caa6db6bf5bf213c0fba7cf8b4fce1f97d38e7dd927d23ab9ec2597ad8f6678dcb46a7b5d960f5d9660b895f746ef32ac15f
SSDEEP

24576:16pEevG5tpOorbdpSJ191UGmqeQO+retPNs7EghLocoa9ivds9zySqHL:1UEWGsmbdErgQOIeFaF6Bacv69eSqr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TRACTOR/tractor.exe

Files

f087633f44faebb978c4391ef4e06d0001799f3ebb9b9d004d729aa0a789dbac
.zip
TRACTOR/Game.dat
TRACTOR/Game.sav
TRACTOR/beupgraded.wav
TRACTOR/getdown.wav
TRACTOR/getup.wav
TRACTOR/tractor.cnt
TRACTOR/tractor.exe
.exe windows:4 windows x86

997278c2494577e47a9688909606c31d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciSendCommandA
sndPlaySoundA

kernel32

GetACP
GetOEMCP
GetTimeZoneInformation
GetCPInfo
HeapAlloc
HeapSize
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapReAlloc
RaiseException
GetFileType
HeapDestroy
HeapCreate
UnhandledExceptionFilter
FreeEnvironmentStringsA
ExitThread
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetStdHandle
SetHandleCount
TerminateProcess
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GlobalAlloc
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcmpA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetModuleFileNameA
lstrlenA
lstrcatA
Sleep
GetSystemTime
HeapFree
GetStartupInfoA
ExitProcess
GetCommandLineA
FileTimeToLocalFileTime
GetModuleHandleA
RtlUnwind
SetErrorMode
FileTimeToSystemTime
SystemTimeToFileTime
GetVersionExA
GetProcessVersion
LocalFileTimeToFileTime
GetFileSize
GetPrivateProfileStringA
GetCurrentDirectoryA
WritePrivateProfileStringA
LocalReAlloc
GetPrivateProfileIntA
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
SizeofResource
LocalFree
LocalAlloc
MulDiv
GlobalFlags
GlobalGetAtomNameA
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
GetThreadLocale
InterlockedIncrement
GetShortPathNameA
FindFirstFileA
GetStringTypeExA
GetVolumeInformationA
LoadLibraryA
FindClose
lstrcpyA
MoveFileA
GetProcAddress
DeleteFileA
LockFile
SetEndOfFile
UnlockFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
GetDiskFreeSpaceA
GetProfileStringA
DuplicateHandle
GetLastError
GetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
SetFileTime
lstrcpynA
FreeLibrary
GetVersion
SetLastError
GlobalAddAtomA
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter

user32

ShowWindow
SetWindowTextA
CharUpperA
GetDC
ReleaseDC
GetWindowDC
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
IsIconic
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
BeginPaint
ReleaseCapture
DestroyMenu
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
wvsprintfA
IsZoomed
OffsetRect
ClientToScreen
PtInRect
GetClassNameA
InsertMenuA
DeleteMenu
GetMenuStringA
GetSysColorBrush
LoadStringA
GetDesktopWindow
DestroyIcon
FillRect
WindowFromPoint
SetRect
InflateRect
GetDCEx
LockWindowUpdate
SetCapture
SetParent
AppendMenuA
GetSystemMenu
InvertRect
SendDlgItemMessageA
SystemParametersInfoA
MapWindowPoints
GetSysColor
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetClientRect
BeginDeferWindowPos
EndDeferWindowPos
ScreenToClient
IsDialogMessageA
ShowScrollBar
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
FindWindowA
SetScrollInfo
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
CreateWindowExA
SetPropA
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetWindow
GetWindowRect
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
GetFocus
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
SetCursor
ShowOwnedPopups
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetWindowLongA
GetDlgItem
IsWindowEnabled
SendMessageA
GetMenu
GetSubMenu
CheckMenuItem
WinHelpA
ScrollWindow
IsChild
GetSystemMetrics
LoadBitmapA
LoadIconA
LoadCursorA
IntersectRect
CopyRect
IsRectEmpty
KillTimer
SetTimer
InvalidateRect
UpdateWindow
PostMessageA
UnionRect
EnableWindow
MessageBoxA
GetCapture
UnhookWindowsHookEx
IsWindowUnicode
CharNextA
DefDlgProcA
ExcludeUpdateRgn
UnregisterClassA
HideCaret
ShowCaret
DrawFocusRect

gdi32

CreateDIBitmap
CreateCompatibleBitmap
DeleteObject
CreateBitmap
CreateSolidBrush
SetBkColor
GetObjectA
SetTextColor
SaveDC
DeleteDC
SelectObject
GetStockObject
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetWindowExtEx
GetClipBox
SelectClipRgn
ScaleWindowExtEx
IntersectClipRect
ExcludeClipRect
LineTo
SetTextAlign
MoveToEx
BitBlt
CreateRectRgn
GetDeviceCaps
PtVisible
CreatePatternBrush
TextOutA
ExtTextOutA
RectVisible
GetTextExtentPointA
GetTextMetricsA
Escape
CreateFontIndirectA
StretchDIBits
PatBlt
SetRectRgn
CreateRectRgnIndirect
CombineRgn
CreatePen
SetPixel
CreateCompatibleDC

comdlg32

GetFileTitleA
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegEnumKeyA
RegSetValueA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegQueryValueA
GetFileSecurityA
RegOpenKeyA
SetFileSecurityA

shell32

DragFinish
DragQueryFileA
ExtractIconA
SHGetFileInfoA

comctl32

ord17
ImageList_Destroy

wsock32

WSAGetLastError
WSASetLastError
WSAStartup
ioctlsocket
htonl
WSACleanup
gethostbyname
inet_ntoa
htons

Sections

.text
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
TRACTOR/tractor.mid
TRACTOR/upgrade.wav
TRACTOR/有问题点我！安装教程！.png
.png

Sharing

General

Malware Config

Signatures

Files

997278c2494577e47a9688909606c31d

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

wsock32

Sections

.text Size: 306KB - Virtual size: 305KB

.rdata Size: 41KB - Virtual size: 40KB

.data Size: 22KB - Virtual size: 38KB

.idata Size: 9KB - Virtual size: 9KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 306KB - Virtual size: 305KB

.rdata
Size: 41KB - Virtual size: 40KB

.data
Size: 22KB - Virtual size: 38KB

.idata
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB