GPackage
Static task
static1
Behavioral task
behavioral1
Sample
game.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
game.exe
Resource
win10v2004-20230915-en
General
-
Target
game.exe
-
Size
268KB
-
MD5
1486f9a5a9bf53f2805d5b3e61f6c938
-
SHA1
9dfd7901f5ff4d43d48a942a8b35d39b8d9487c6
-
SHA256
4900aa131cf35d4951943f2d6ee831841745af8e5d657ffdcfd7fb012cbaa2ef
-
SHA512
afe2acbab34ad0a756284128a2e7704072725ca2ab7fdcd08f1c746df8239497c6493722f9fc14bd6c5fadb15ec51c2d91c0c18965344838d573309c78187fda
-
SSDEEP
3072:p1cxjPM4oF5Zyi18StamvNiCYW9nnri++b/N/NRVfxIZ:p1yPM4oz4VCYWs/HcZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource game.exe
Files
-
game.exe.exe windows:4 windows x86
3b7f514035c5865cee093ce7e3a8b019
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
window
?OnInitDialog@WDialog@@UAEXXZ
??0WWizardPage@@QAE@PBGHPAVWWizardDialog@@@Z
??0FDelegate@@QAE@PAVFCommandTarget@@P81@AEXXZ@Z
??0WButton@@QAE@PAVWWindow@@HUFDelegate@@P6GJPAUHWND__@@IIJ@Z@Z
??1WWizardPage@@UAE@XZ
??1WButton@@UAE@XZ
?OnClose@WWindow@@UAEHXZ
?OnDestroy@WWindow@@UAEXXZ
?OnCurrent@WWizardPage@@UAEXXZ
?GetBackText@WWizardPage@@UAEPBGXZ
?GetFinishText@WWizardPage@@UAEPBGXZ
?GetCancelText@WWizardPage@@UAEPBGXZ
?GetShow@WWizardPage@@UAEHXZ
?OnCancel@WWizardPage@@UAEXXZ
??0WCrashBoxDialog@@QAE@PBG0@Z
?hInstanceWindow@@3PAUHINSTANCE__@@A
??1WCrashBoxDialog@@UAE@XZ
?EndDialog@WDialog@@QAEXH@Z
?OnInitDialog@WWizardDialog@@UAEXXZ
??BWWindow@@QBEPAUHWND__@@XZ
??0WWizardDialog@@QAE@XZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?MaybeDestroy@WWindow@@QAEXXZ
??1WLabel@@UAE@XZ
??1WWizardDialog@@UAE@XZ
?Unused@FCommandTarget@@UAEXXZ
?Show@WDialog@@UAEXH@Z
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?DoDestroy@WWindow@@UAEXXZ
?WndProc@WWindow@@UAEJIIJ@Z
?CallDefaultProc@WDialog@@UAEHIIJ@Z
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?SetText@WWindow@@UAEXPBG@Z
?GetLength@WWindow@@UAEHXZ
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?GetBitmapHandle@FWindowsBitmap@@QAEPAUHBITMAP__@@XZ
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WObjectProperties@@QAE@VFName@@KPBGPAVWWindow@@H@Z
?ScrollCaret@WEdit@@QAEXXZ
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnSize@WWindow@@UAEXKHH@Z
?OnWindowPosChanging@WWindow@@UAEXPAH000@Z
?GLogWindow@@3PAVWLog@@A
?OnCommand@WWindow@@UAEXH@Z
?GetNext@WWizardPage@@UAEPAV1@XZ
?OnActivate@WWindow@@UAEXH@Z
?OnChar@WWindow@@UAEXG@Z
?OnKeyDown@WWindow@@UAEXG@Z
?OnCut@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
?OnShowWindow@WWindow@@UAEXH@Z
?OnUndo@WWindow@@UAEXXZ
?OnEraseBkgnd@WWindow@@UAEHXZ
?OnVScroll@WWindow@@UAEXIJ@Z
?OnHScroll@WWindow@@UAEXIJ@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WWindow@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
?OnTimer@WWindow@@UAEXXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnLeftButtonDoubleClick@WWindow@@UAEXXZ
?OnMiddleButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDown@WWindow@@UAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WWindow@@UAEHXZ
?OnClose@WWizardDialog@@UAEHXZ
?OnDestroy@WWizardDialog@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBG0@Z
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnBack@WWizardDialog@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?OnFinish@WWizardDialog@@UAEXXZ
?OnCancel@WWizardDialog@@UAEXXZ
??0FWindowsBitmap@@QAE@H@Z
?LoadFile@FWindowsBitmap@@QAEHPBG@Z
??1WCoolButton@@UAE@XZ
??0WCoolButton@@QAE@PAVWWindow@@HUFDelegate@@K@Z
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
?GetWindowClassName@WConfigProperties@@UAEXPAG@Z
?GetPackageName@WConfigProperties@@UAEPBGXZ
?Show@WWindow@@UAEXH@Z
?ExpandAll@WProperties@@UAEXXZ
?SetValue@WProperties@@UAEXPBG@Z
?BeginSplitterDrag@WProperties@@UAEXXZ
?ForceRefresh@WProperties@@UAEXXZ
?SetItemFocus@WProperties@@UAEXH@Z
?ResizeList@WProperties@@UAEXXZ
?GetDividerWidth@WProperties@@UAEHXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?OnDestroy@WProperties@@UAEXXZ
?OnSetCursor@WProperties@@UAEHXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnInitDialog@WWindow@@UAEXXZ
?OnPaint@WProperties@@UAEXXZ
?OnActivate@WProperties@@UAEXH@Z
?OnSize@WProperties@@UAEXKHH@Z
?CallDefaultProc@WWindow@@UAEHIIJ@Z
?GetWindowClassName@WObjectProperties@@UAEXPAG@Z
?DoDestroy@WProperties@@UAEXXZ
?GetPackageName@WObjectProperties@@UAEPBGXZ
?Show@WObjectProperties@@UAEXH@Z
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
?OnSysCommand@WWindow@@UAEHH@Z
??0WConfigProperties@@QAE@VFName@@PBG@Z
??1WObjectProperties@@UAE@XZ
??1WConfigProperties@@UAE@XZ
?SetExec@WTerminal@@QAEXPAVFExec@@@Z
?Paste@WTerminal@@UAEXXZ
?TypeChar@WTerminal@@UAEXG@Z
?OnDestroy@WLog@@UAEXXZ
?OnClose@WLog@@UAEHXZ
?OnCreate@WLog@@UAEXXZ
?OnShowWindow@WLog@@UAEXH@Z
?OnCommand@WLog@@UAEXH@Z
?OnSize@WTerminal@@UAEXKHH@Z
?OnSetFocus@WTerminal@@UAEXPAUHWND__@@@Z
?OnCopyData@WLog@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?SetText@WLog@@UAEXPBG@Z
?WndProc@WLog@@UAEJIIJ@Z
?GetWindowClassName@WLog@@UAEXPAG@Z
?GetPackageName@WLog@@UAEPBGXZ
?OpenWindow@WLog@@QAEXHH@Z
??0WLog@@QAE@PBGAAPAVFArchive@@VFName@@PAVWWindow@@@Z
?InitWindowing@@YAXXZ
??1WLog@@UAE@XZ
?OnMove@WWindow@@UAEXHH@Z
??1FWindowsBitmap@@QAE@XZ
core
?IsA@UObject@@QBEHPAVUClass@@@Z
?MapObject@FArchive@@UAEHPAVUObject@@@Z
?AtEnd@FArchive@@UAEHXZ
?AtStopper@FArchive@@UAEHXZ
?SetStopper@FArchive@@UAEXH@Z
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?Flush@FArchive@@UAEXXZ
?GetError@FArchive@@UAEHXZ
?appStrchr@@YAPAGPBGH@Z
??4FString@@QAEAAV0@ABV0@@Z
?IsError@FArchive@@QAEHXZ
??4FString@@QAEAAV0@PBG@Z
?ParseParam@@YAHPBG0@Z
GIsSSE
?Logf@FOutputDevice@@QAAXPBGZZ
??YFString@@QAEAAV0@PBG@Z
??0FString@@QAE@PBG@Z
??HFString@@QAE?AV0@PBG@Z
?IsChildOf@UStruct@@QBEHPBV1@@Z
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?GError@@3PAVFOutputDeviceError@@A
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@1@Z
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBG2KPAVUPackageMap@@@Z
??0FArray@@QAE@XZ
?Add@FArray@@QAEHHH@Z
??0FFileManager@@QAE@XZ
?Init@FFileManager@@UAEXH@Z
?CalcHomeDir@FFileManager@@UAEPBGXZ
?GIsSlowTask@@3HA
?appGetVarArgs@@YAHPAGHAAPBG@Z
??0FFeedbackContext@@QAE@XZ
?GIsClient@@3HA
?GIsEditor@@3HA
?GIsStarted@@3HA
?LocalizeError@@YAPBGPBG00@Z
?GLog@@3PAVFOutputDevice@@A
?appGetSystemErrorMessage@@YAPBGH@Z
?StaticShutdownAfterError@UObject@@SAXXZ
?GErrorHist@@3PAGA
?appStrncpy@@YAPAGPAGPBGH@Z
?appStrncat@@YAPAGPAGPBGH@Z
?GIsGuarded@@3HA
?LocalizeError@@YAPBGPBDPBG1@Z
?appRequestExit@@YAXH@Z
??0FOutputDeviceError@@QAE@XZ
?Flush@FOutputDevice@@UAEXXZ
?GIsCriticalError@@3HA
?SafeSuppressed@FName@@SAHW4EName@@@Z
?appUserDir@@YAPBGXZ
?appCmdLine@@YAPBGXZ
?Parse@@YAHPBG0PAGH@Z
?appPackage@@YAPBGXZ
?appStrcat@@YAPAGPAGPBG@Z
?GNull@@3PAVFOutputDevice@@A
?GFileManager@@3PAVFFileManager@@A
?SafeString@FName@@SAPBGW4EName@@@Z
?appSprintf@@YAHPAGPBGZZ
?GLogHook@@3PAVFOutputDevice@@A
?appTimestamp@@YAPBGXZ
?Logf@FOutputDevice@@QAAXW4EName@@PBGZZ
??0FOutputDevice@@QAE@XZ
?GPageSize@@3KA
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@@@A
??0FMalloc@@QAE@XZ
?appStrfind@@YAPBGPBG0@Z
?appInit@@YAXPBG0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZH@Z
?GIsServer@@3HA
?GIsScriptable@@3HA
?GLazyLoad@@3HA
?GUnicode@@3HA
?appPreExit@@YAXXZ
?appExit@@YAXXZ
?LocalizeGeneral@@YAPBGPBG00@Z
?Log@FOutputDevice@@QAEXW4EName@@PBG@Z
?GUserIni@@3PAGA
?appStrcmp@@YAHPBG0@Z
?appStrstr@@YAPAGPBG0@Z
??8FString@@QBEHABV0@@Z
??8FString@@QBEHPBG@Z
?Log@FOutputDevice@@QAEXPBG@Z
?appAtof@@YAMPBG@Z
?appStaticString1024@@YAPAGXZ
??0FArray@@IAE@HH@Z
?winGetSizeUNICODE@@YAHPBD@Z
?winToUNICODE@@YAPAGPAGPBDH@Z
?Empty@FArray@@QAEXHH@Z
??DFString@@QBE?AV0@PBG@Z
??DFString@@QBE?AV0@ABV0@@Z
?GetPathName@UObject@@QBEPBGPAV1@PAG@Z
?LeftChop@FString@@QBE?AV1@H@Z
?appSystemTime@@YAXAAH0000000@Z
?GMachineVideo@@3PAGA
?GMachineCPU@@3PAGA
?GMachineOS@@3PAGA
?GBuildLabel@@3PAGA
??0FString@@QAE@ABV0@@Z
??YFString@@QAEAAV0@ABV0@@Z
?Parse@@YAHPBG0AAM@Z
?appRand@@YAHXZ
?appSaveStringToFile@@YAHABVFString@@PBGPAVFFileManager@@K@Z
?appLoadFileToString@@YAHAAVFString@@PBGPAVFFileManager@@@Z
?GWindowManager@@3PAVUSubsystem@@A
?appSleep@@YAXM@Z
?GScriptCycles@@3HA
?Parse@@YAHPBG0AAH@Z
?GIsBenchmarking@@3HA
?appRandInit@@YAXH@Z
?GetOuter@UObject@@QBEPAV1@XZ
?GExec@@3PAVFExec@@A
?Printf@FString@@SA?AV1@PBGZZ
?Parse@@YAHPBG0AAVFString@@@Z
??0FName@@QAE@W4EName@@@Z
?appSqrt@@YANN@Z
?ParseCommand@@YAHPAPBGPBG@Z
?StaticClass@UClass@@SAPAV1@XZ
?ParseObject@@YAHPBG0PAVUClass@@AAPAVUObject@@PAV2@@Z
?GetDefaultActor@UClass@@QAEPAVAActor@@XZ
??0FName@@QAE@PBGW4EFindName@@@Z
?StaticLoadObject@UObject@@SAPAV1@PAVUClass@@PAV1@PBG2KPAVUPackageMap@@@Z
?ExportToOutputDevice@UExporter@@SAXPAVUObject@@PAV1@AAVFOutputDevice@@PBGH@Z
?appClipboardCopy@@YAXPBG@Z
?GetDefaultObject@UClass@@QAEPAVUObject@@XZ
??0FName@@QAE@XZ
?Parse@@YAHPBG0AAVFName@@@Z
?GetName@UObject@@QBEPBGXZ
??DFName@@QBEPBGXZ
?LocalizeGeneral@@YAPBGPBDPBG1@Z
??1FArray@@QAE@XZ
?StaticClass@UPackage@@SAPAVUClass@@XZ
?Remove@FArray@@QAEXHHH@Z
?appItoa@@YAPAGH@Z
??HFString@@QAE?AV0@ABV0@@Z
?appAtoi@@YAHPBG@Z
?GIni@@3PAGA
?appMsgf@@YA?BHHPBGZZ
?TotalSize@FArchive@@UAEHXZ
?Precache@FArchive@@UAEXH@Z
??0FArchive@@QAE@XZ
??1FArchive@@UAE@XZ
?SerializeBits@FArchive@@UAEXPAXH@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
??6FArchive@@UAEAAV0@AAVFName@@@Z
?appUnwindf@@YAXPBGZZ
?GUnicodeOS@@3HA
?appFailAssert@@YAXPBD0H@Z
?appStricmp@@YAHPBG0@Z
?appStrlen@@YAHPBG@Z
?appFromAnsi@@YAPBGPBDPAG@Z
?appStrcpy@@YAPAGPAGPBG@Z
?GSecondsPerCycle@@3NA
??1FString@@QAE@XZ
??0FString@@QAE@XZ
?Localize@@YAPBGPBG000H@Z
??DFString@@QBEPBGXZ
?appGetAppInstanceHandle@@YAPAXXZ
?GCRCTable@@3PAKA
?GMalloc@@3PAVFMalloc@@A
??9FString@@QBEHABV0@@Z
??0FString@@QAE@PBD@Z
?GConfig@@3PAVFConfigCache@@A
?winToANSI@@YAPADPADPBGH@Z
?winGetSizeANSI@@YAHPBG@Z
?appBaseDir@@YAPBGXZ
?NotifyExec@FNotifyHook@@UAEXPAXPBG@Z
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
??0FNotifyHook@@QAE@XZ
??0FExec@@QAE@XZ
?GIsRequestingExit@@3HA
?GIsRunning@@3HA
?MapName@FArchive@@UAEHPAVFName@@@Z
engine
?GetLevel@AActor@@QBEPAVULevel@@XZ
?StaticClass@UGameEngine@@SAPAVUClass@@XZ
?UpdateString@FStats@@QAEXAAVFString@@H@Z
?StaticClass@AActor@@SAPAVUClass@@XZ
?Clear@FStats@@QAEXXZ
?GStats@@3VFStats@@A
?StaticClass@UEngine@@SAPAVUClass@@XZ
?GEngineStats@@3VFEngineStats@@A
?StaticClass@URenderDevice@@SAPAVUClass@@XZ
comdlg32
GetSaveFileNameA
d3d8
Direct3DCreate8
ddraw
DirectDrawCreate
kernel32
GetWindowsDirectoryW
GetSystemDirectoryW
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
CloseHandle
GetSystemInfo
GetLastError
VirtualAlloc
VirtualFree
GetFileSize
CreateFileA
CreateFileW
SetFilePointer
SetFileAttributesA
SetFileAttributesW
WriteFile
DeleteFileA
DeleteFileW
MoveFileA
GetModuleFileNameW
GetFileAttributesExW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryA
GetCurrentDirectoryW
ReadFile
CopyFileA
CopyFileW
CreateDirectoryA
CreateDirectoryW
GlobalMemoryStatus
GetCurrentThread
GetCurrentThreadId
Sleep
SetThreadPriority
GetStartupInfoA
RemoveDirectoryA
RemoveDirectoryW
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetDiskFreeSpaceExW
GetDiskFreeSpaceExA
WideCharToMultiByte
CreateMutexA
CreateMutexW
GetCommandLineW
GetModuleHandleA
MoveFileW
user32
SetPropA
RemovePropW
RemovePropA
PeekMessageA
DispatchMessageA
GetForegroundWindow
GetWindowThreadProcessId
SetFocus
ShowWindow
PeekMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
LoadIconW
LoadIconA
SetForegroundWindow
DestroyWindow
CreateDialogParamW
CreateDialogParamA
GetDlgItem
GetSystemMetrics
SetWindowPos
SendMessageW
SendMessageA
UpdateWindow
SetPropW
shell32
ShellExecuteA
ShellExecuteW
msvcr70
?terminate@@YAXXZ
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
free
calloc
_purecall
_CxxThrowException
__CxxFrameHandler
__set_app_type
_controlfp
_except_handler3
Exports
Exports
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ