File-American[.]Truck[.]Simulator[.]v1[.]48[.]2[.]6s[.]Incl_172124[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

File-American.Truck.Simulator.v1.48.2.6s.Incl_172124.exe
Size

4.0MB
MD5

706cc5f3aa95023f079262b32690995c
SHA1

4362195040b0569022922883a362e10f66243664
SHA256

1ba24524844a84c89409c3719f3680df94d9cbf663c0b0834be40ef0ce987356
SHA512

78123bd7f5997418096814dd7aaa19aa2b3cc9a1844ef4ca6a7c309c1ac8cfe17b10808824213ecad81479ae230ddf07c91405643f28e973f4cf6a181cf1fd88
SSDEEP

49152:G5/lSzRhHFMVeSWjO2d41t5/AqoLtStUbD7lI1Y8sq4yLQKhHeRkZH:G5/czPLVw5/A7LGU37irsq4MQKlX9

Score

1^/10

Malware Config

Signatures

Files

File-American.Truck.Simulator.v1.48.2.6s.Incl_172124.exe
.exe windows:6 windows x86

5838b8052e033cebca65d42c174baa0e

Code Sign

4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Certificate

Issuer

CN=Entrust Root Certification Authority - G2,OU=See www.entrust.net/legal-terms+OU=(c) 2009 Entrust\, Inc. - for authorized use only,O=Entrust\, Inc.,C=US

Not Before

07/05/2021, 15:43

Not After

07/11/2030, 16:13

Subject

CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Certificate

Issuer

CN=Entrust Code Signing Root Certification Authority - CSBR1,O=Entrust\, Inc.,C=US

Not Before

07/05/2021, 19:19

Not After

29/12/2040, 23:59

Subject

CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

49:ce:c0:5a:d0:28:f4:e8:a4:d7:73:9f:2d:fa:4c:6c
Certificate

Issuer

CN=Entrust Extended Validation Code Signing CA - EVCS2,O=Entrust\, Inc.,C=US

Not Before

28/12/2022, 22:16

Not After

28/12/2023, 22:16

Subject

SERIALNUMBER=1242287,CN=Mack Digital Marking\, LLC,O=Mack Digital Marking\, LLC,L=Louisville,ST=Kentucky,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#13084b656e7475636b79,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

Issuer

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Not Before

03/05/2023, 00:00

Not After

02/08/2034, 23:59

Subject

CN=Sectigo RSA Time Stamping Signer #4,O=Sectigo Limited,ST=Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

Issuer

CN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=US

Not Before

02/05/2019, 00:00

Not After

18/01/2038, 23:59

Subject

CN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

23:b3:4e:fe:f0:02:1a:33:ab:1d:bf:95:dd:2d:7e:d1:15:6f:2f:d0:f0:b6:ae:0b:89:bf:31:ff:49:4c:84:0f
Signer

Actual PE Digest

23:b3:4e:fe:f0:02:1a:33:ab:1d:bf:95:dd:2d:7e:d1:15:6f:2f:d0:f0:b6:ae:0b:89:bf:31:ff:49:4c:84:0f

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

winspool.drv

DocumentPropertiesW
EnumPrintersW
ClosePrinter
GetDefaultPrinterW
OpenPrinterW

comctl32

ImageList_GetBkColor
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_GetIcon
ImageList_DragLeave
FlatSB_SetScrollInfo
ImageList_Remove
ImageList_Write
ImageList_Draw
FlatSB_SetScrollProp
FlatSB_GetScrollInfo
FlatSB_SetScrollPos
ImageList_Read
ImageList_SetOverlayImage
ImageList_EndDrag
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_DrawIndirect
ImageList_SetBkColor
InitializeFlatSB
ImageList_LoadImageW
ImageList_DrawEx
ImageList_Create
ImageList_DragShowNolock
ImageList_GetImageInfo
ImageList_DragEnter
ImageList_Copy
_TrackMouseEvent
ImageList_ReplaceIcon
FlatSB_GetScrollPos
ImageList_Replace
ImageList_Destroy
ImageList_Add
ImageList_GetDragImage
ImageList_BeginDrag
ImageList_DragMove

shell32

ShellExecuteW
SHGetFolderPathW
SHAppBarMessage
ShellExecuteExW
Shell_NotifyIconW

user32

RemoveMenu
BeginPaint
CreateIcon
GetClassInfoW
IsIconic
GetWindowTextW
ValidateRect
FillRect
GetActiveWindow
GetParent
GetMessageExtraInfo
ShowWindow
IsRectEmpty
DestroyIcon
IsZoomed
CopyIcon
SetRect
CreateAcceleratorTableW
SetPropW
RemovePropW
SetScrollInfo
GetSystemMetrics
WindowFromPoint
AdjustWindowRectEx
GetWindowDC
RedrawWindow
SetCursor
FindWindowExW
MonitorFromRect
GetWindowRect
ActivateKeyboardLayout
MonitorFromWindow
GetComboBoxInfo
LoadBitmapW
InsertMenuItemW
EnableScrollBar
EnableWindow
CopyImage
GetKeyNameTextW
SetCapture
EnumClipboardFormats
GetCursor
DispatchMessageW
DestroyMenu
CloseClipboard
GetKeyboardLayoutNameW
CharNextW
CheckMenuItem
IsWindowUnicode
FrameRect
GetSysColor
LoadStringW
MessageBeep
RegisterClipboardFormatW
DestroyWindow
GetForegroundWindow
GetSystemMenu
DrawFrameControl
UnregisterClassW
SendMessageA
SetWindowTextW
CreateMenu
RegisterClassW
TrackPopupMenu
HideCaret
DestroyCursor
IsWindowVisible
SetClassLongW
CallNextHookEx
GetMenuItemCount
SendMessageW
GetDlgCtrlID
ScreenToClient
GetDCEx
GetKeyState
SetParent
SetWindowRgn
GetLastActivePopup
GetCursorPos
GetMenuState
PostQuitMessage
SetWindowLongW
ClientToScreen
DispatchMessageA
ShowCaret
PeekMessageW
OffsetRect
GetKeyboardState
GetScrollInfo
InsertMenuW
CharUpperBuffW
InvalidateRect
SetFocus
SetWindowPos
UnhookWindowsHookEx
EnumWindows
CharUpperW
IsWindow
GetTopWindow
GetClassInfoExW
DrawMenuBar
CallWindowProcW
SetMenu
EnumDisplayMonitors
GetClassNameW
ShowScrollBar
CharLowerBuffW
WaitMessage
SetActiveWindow
DrawEdge
MessageBoxW
CreateIconIndirect
LoadCursorW
SetWindowPlacement
ReleaseCapture
IsWindowEnabled
GetPropW
GetScrollPos
SystemParametersInfoW
GetWindow
DefFrameProcW
GetWindowLongW
GetSubMenu
ReleaseDC
GetClipboardData
IsChild
GetMenuStringW
MonitorFromPoint
EnableMenuItem
RegisterWindowMessageW
GetDlgItem
PostMessageW
SetClipboardData
IsClipboardFormatAvailable
DrawIconEx
GetSysColorBrush
GetDC
IsDialogMessageA
PeekMessageA
GetWindowPlacement
IsDialogMessageW
DefWindowProcW
GetMenu
CreateWindowExW
SetMenuItemInfoW
SetCursorPos
KillTimer
ShowOwnedPopups
DrawTextExW
GetMessagePos
DefMDIChildProcW
ScrollWindow
PtInRect
EndMenu
FindWindowW
GetMenuItemInfoW
InflateRect
SetTimer
CreatePopupMenu
SwitchToThisWindow
DrawIcon
LoadKeyboardLayoutW
EnumThreadWindows
EnumChildWindows
TranslateMDISysAccel
GetCapture
GetClassLongW
CharLowerW
GetKeyboardLayoutList
GetFocus
LoadIconW
EmptyClipboard
GetKeyboardLayout
GetMenuItemID
GetWindowThreadProcessId
MsgWaitForMultipleObjectsEx
UpdateWindow
MapWindowPoints
SetForegroundWindow
SetScrollPos
DrawTextW
OpenClipboard
MapVirtualKeyW
TranslateMessage
GetIconInfo
DrawFocusRect
SetWindowsHookExW
SetScrollRange
GetClientRect
EndPaint
GetUpdateRect
GetMenuItemRect
GetScrollRange
GetMonitorInfoW
GetDesktopWindow
DeleteMenu
MsgWaitForMultipleObjects

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

oleaut32

VariantChangeType
VariantClear
SafeArrayGetLBound
SafeArrayPtrOfIndex
GetErrorInfo
SafeArrayCreate
VariantInit
SysReAllocStringLen
VariantCopy
SafeArrayGetUBound
SysFreeString
SysAllocStringLen

advapi32

RegUnLoadKeyW
GetUserNameW
RegOpenKeyExW
RegDeleteValueW
OpenServiceW
RegLoadKeyW
RegFlushKey
OpenSCManagerA
RegEnumValueW
RegDeleteKeyW
RegRestoreKeyW
RegCreateKeyExW
RegCloseKey
AdjustTokenPrivileges
RegQueryValueExW
RegSaveKeyW
RegConnectRegistryW
RegReplaceKeyW
OpenProcessToken
RegEnumKeyExW
QueryServiceStatus
RegSetValueExW
LookupPrivilegeValueW
RegQueryInfoKeyW

msvcrt

memset
memcpy

winhttp

WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpWriteData
WinHttpQueryHeaders
WinHttpReadData
WinHttpConnect
WinHttpSetTimeouts
WinHttpGetIEProxyConfigForCurrentUser
WinHttpQueryOption
WinHttpSetOption
WinHttpOpen
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpQueryAuthSchemes
WinHttpSetCredentials
WinHttpQueryDataAvailable
WinHttpSetStatusCallback
WinHttpSendRequest
WinHttpGetProxyForUrl

kernel32

GetTimeZoneInformation
FileTimeToSystemTime
SuspendThread
GlobalSize
WideCharToMultiByte
SizeofResource
MultiByteToWideChar
ResumeThread
GlobalAlloc
FormatMessageW
GetCurrentProcessId
FindClose
ExitProcess
FreeResource
GetModuleHandleW
GetStartupInfoW
TerminateThread
SetErrorMode
GetUserDefaultUILanguage
GetCurrentThreadId
GetTickCount
VirtualQueryEx
VerifyVersionInfoW
GetCurrentThread
K32EnumProcessModulesEx
EnterCriticalSection
LeaveCriticalSection
lstrlenW
DeleteCriticalSection
GetExitCodeThread
EnumSystemLocalesW
GetFileAttributesW
CreateMutexW
WaitForSingleObject
GlobalDeleteAtom
GlobalFindAtomW
SetEndOfFile
GetProcAddress
SetLastError
VirtualQuery
GlobalHandle
CreateThread
RaiseException
GetModuleFileNameW
GetSystemDefaultUILanguage
HeapCreate
GetDiskFreeSpaceW
LockResource
CloseHandle
GetCommandLineW
GetCurrentProcess
FindNextFileW
GlobalLock
LoadLibraryA
DeviceIoControl
GetFullPathNameW
GetStdHandle
ReadFile
TlsSetValue
SetThreadPriority
GetCPInfo
LoadResource
EnumResourceNamesW
IsDebuggerPresent
IsValidLocale
GetCPInfoExW
HeapFree
TryEnterCriticalSection
CreateDirectoryW
CreateProcessW
Sleep
GetProcessHeap
ResetEvent
LCMapStringW
FindFirstFileW
SetThreadLocale
GetVersion
CreateEventW
GetSystemInfo
SwitchToThread
MoveFileW
GlobalFree
LoadLibraryW
LoadLibraryExW
FreeLibrary
HeapDestroy
CreateFileW
MulDiv
RtlUnwind
GetVersionExW
UnhandledExceptionFilter
GetLocaleInfoW
ExitThread
GetDriveTypeW
SetFilePointer
WaitForMultipleObjectsEx
WriteFile
LocalAlloc
FindResourceW
GetThreadLocale
VirtualFree
GlobalUnlock
HeapAlloc
InitializeCriticalSection
GlobalAddAtomW
VerSetConditionMask
QueryPerformanceCounter
GetDateFormatW
GetLastError
CompareStringW
QueryPerformanceFrequency
GetFileSizeEx
GetACP
GetLocalTime
LocalFree
GetThreadPriority
VirtualAlloc
EnumCalendarInfoW
TlsGetValue
SetEvent

ole32

IsEqualGUID
CoCreateInstance
CoTaskMemFree
OleUninitialize
CoUninitialize
CoTaskMemAlloc
OleInitialize
CoInitialize

gdi32

SetDIBits
CreateBrushIndirect
Polygon
Chord
ExtCreateRegion
GetBitmapBits
ExcludeClipRect
GetCurrentObject
SetDIBColorTable
SetRectRgn
SetWindowOrgEx
SelectObject
GetTextExtentPointW
SetBkMode
CombineRgn
SetWorldTransform
SelectPalette
GetEnhMetaFilePaletteEntries
GetObjectW
GetPixel
SetViewportOrgEx
GetPaletteEntries
RealizePalette
CreateCompatibleDC
UnrealizeObject
CreateCompatibleBitmap
CreatePenIndirect
SetROP2
SetGraphicsMode
Rectangle
ExtFloodFill
GetStockObject
CreateDCW
StretchDIBits
EndPage
SetBrushOrgEx
GetViewportOrgEx
GetWinMetaFileBits
MaskBlt
GetDeviceCaps
GetRgnBox
CreateHalftonePalette
GetStretchBltMode
SetPixel
CreateDIBSection
SetStretchBltMode
GetEnhMetaFileBits
BitBlt
AngleArc
CopyEnhMetaFileW
FrameRgn
AbortDoc
GetEnhMetaFileHeader
GetTextColor
RectVisible
GetWindowOrgEx
ArcTo
CreateBitmap
StartDocW
GetTextExtentPoint32W
ExtTextOutW
PolyBezier
CreateFontIndirectW
CreateDIBitmap
LineTo
SetBkColor
GetTextMetricsW
SetEnhMetaFileBits
StretchBlt
Polyline
SetWinMetaFileBits
EndDoc
PolyBezierTo
DeleteEnhMetaFile
GetDIBColorTable
GetBkMode
CreateICW
DeleteObject
GetClipBox
CreateSolidBrush
RestoreDC
RoundRect
StartPage
Pie
SetAbortProc
EnumFontFamiliesExW
PatBlt
GetBrushOrgEx
GetDIBits
PlayEnhMetaFile
GetCurrentPositionEx
GetEnhMetaFileDescriptionW
SaveDC
Arc
GetSystemPaletteEntries
EnumFontsW
CreatePalette
MoveToEx
Ellipse
GdiFlush
CreateRectRgn
IntersectClipRect
GetNearestPaletteIndex
SetTextColor
DeleteDC
CreateRoundRectRgn
SetDCPenColor

Exports

Exports

__dbk_fcall_wrapper
dbkFCallWrapperAddr

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 500KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 105KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.didata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 92B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 93B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 262KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5838b8052e033cebca65d42c174baa0e

Code Sign

4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7fCertificate

Extended Key Usages

Key Usages

35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2bCertificate

Extended Key Usages

Key Usages

49:ce:c0:5a:d0:28:f4:e8:a4:d7:73:9f:2d:fa:4c:6cCertificate

Extended Key Usages

Key Usages

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4Certificate

Extended Key Usages

Key Usages

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate

Extended Key Usages

Key Usages

23:b3:4e:fe:f0:02:1a:33:ab:1d:bf:95:dd:2d:7e:d1:15:6f:2f:d0:f0:b6:ae:0b:89:bf:31:ff:49:4c:84:0fSigner

Headers

DLL Characteristics

File Characteristics

Imports

winmm

winspool.drv

comctl32

shell32

user32

version

oleaut32

advapi32

msvcrt

winhttp

kernel32

ole32

gdi32

Exports

Exports

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.itext Size: 10KB - Virtual size: 9KB

.data Size: 500KB - Virtual size: 500KB

.bss Size: - Virtual size: 105KB

.idata Size: 14KB - Virtual size: 14KB

.didata Size: 4KB - Virtual size: 3KB

.edata Size: 512B - Virtual size: 112B

.tls Size: - Virtual size: 92B

.rdata Size: 512B - Virtual size: 93B

.reloc Size: 262KB - Virtual size: 261KB

.rsrc Size: 227KB - Virtual size: 227KB

4e:40:e4:37:54:ed:e6:8c:00:00:00:00:51:d3:94:7f
Certificate

35:af:b7:7b:9d:34:1f:6a:fc:8f:84:46:ab:31:35:2b
Certificate

49:ce:c0:5a:d0:28:f4:e8:a4:d7:73:9f:2d:fa:4c:6c
Certificate

39:4c:25:e1:7c:a0:6d:27:a8:65:e2:3b:d9:1d:22:d4
Certificate

30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9
Certificate

23:b3:4e:fe:f0:02:1a:33:ab:1d:bf:95:dd:2d:7e:d1:15:6f:2f:d0:f0:b6:ae:0b:89:bf:31:ff:49:4c:84:0f
Signer

.text
Size: 3.0MB - Virtual size: 3.0MB

.itext
Size: 10KB - Virtual size: 9KB

.data
Size: 500KB - Virtual size: 500KB

.bss
Size: - Virtual size: 105KB

.idata
Size: 14KB - Virtual size: 14KB

.didata
Size: 4KB - Virtual size: 3KB

.edata
Size: 512B - Virtual size: 112B

.tls
Size: - Virtual size: 92B

.rdata
Size: 512B - Virtual size: 93B

.reloc
Size: 262KB - Virtual size: 261KB

.rsrc
Size: 227KB - Virtual size: 227KB