Static task
static1
Behavioral task
behavioral1
Sample
game.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
game.exe
Resource
win10v2004-20230915-en
General
-
Target
game.exe.7z
-
Size
171KB
-
MD5
c10037caeb1bcb7f4f7513466fbc6637
-
SHA1
83046acdbaafbfe6306cfbcb31a9e5e1cc14f762
-
SHA256
ec4e4d1c2c6309900f2a3ab0a1f5cb039e279cde1125b8453fc7b67f40a8925d
-
SHA512
23887f676dc011e38e4de0da2fec087f9016cd25741bf225470129e3a0b84b5a8d584e01eecc7e9018b7470a862858e3400c62ba5bf1933c6a5f0eed3172d746
-
SSDEEP
3072:7xRZyEjtTFJZK+DBcuF6AetGuiGAJsujAUFh8by/bqaB:7HZLhZK+DBcQkIuiFssp8b9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/game.exe
Files
-
game.exe.7z.7z
Password: infected
-
game.exe.exe windows:5 windows x86
Password: infected
2ccdef407f36a7b89af6047624f622a1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
SetConsoleTitleW
AllocConsole
GetModuleHandleW
GetPrivateProfileStringW
GetFileAttributesW
SetCurrentDirectoryW
GetModuleFileNameW
LCMapStringW
LCMapStringA
GetVersionExW
GetStringTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
MultiByteToWideChar
GetProcessHeap
SetEndOfFile
SetFilePointer
SetStdHandle
FormatMessageW
GetLastError
GetUserDefaultUILanguage
GetProcAddress
GetStringTypeW
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
Sleep
ExitProcess
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
HeapFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
CloseHandle
CreateFileA
RtlUnwind
HeapAlloc
HeapReAlloc
VirtualAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
user32
DefWindowProcW
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
SetRect
GetWindowLongW
AdjustWindowRectEx
GetSystemMetrics
SetWindowPos
ShowWindow
GetDC
FillRect
ReleaseDC
PeekMessageW
GetMessageW
DispatchMessageW
MessageBoxW
LoadStringW
wsprintfW
gdi32
GetStockObject
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
Sections
.text Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 353KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ