Game_Components[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Game_Components.rar
Size

8.2MB
MD5

07c746efebb098c901a49065d730e4d9
SHA1

72b683be702c9d2e9e108d4df255af59b509de0f
SHA256

9af623bbb4cc81dd672556bd61969826894d1a9fafc0d5626dba37f9403cf3e0
SHA512

0534c9ba661788735b751daa80f6e4ee558ba8f7f561d7ee1f0a5488f10a170e4e12927c1a7e91661ca93667a9b52ea43e691d2bc28b247df0fbef40dea21d19
SSDEEP

196608:NWIa59PKbGGm6xtu4f8bCIsb46MKigUwvYAsPAQUASIF:NWZKbxQ4fcqrMKigUEY5PAQUASIF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Game_Files.exe

Files

Game_Components.rar
.rar

Password: 1234
Game_Files.exe
.exe windows:6 windows x86

Password: 1234

9b6f3f808f78d81fe0f909afd50d547c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32NextW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

msvcrt

memset

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 982KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

[0]
Size: 694.1MB - Virtual size: 694.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.HZ>
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.x2R
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.anN
Size: 4.4MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMG/Advanced Settings.png
.png
IMG/Menu.png
.png
IMG/Resolution.png
.png
Must Read (Important).txt
PASSWORD IS 1234.txt