Static task
static1
General
-
Target
Brood War Alternate Public Release.zip
-
Size
751.4MB
-
MD5
22453d93b9e4cbd4f9597f42554cc1b9
-
SHA1
4cbd586d5ac69368c40e709bb40457232ded3607
-
SHA256
4a0d5bfdfd423643d5b351893c571a12393a539fcffce4c842ca7c96da4fb37a
-
SHA512
c1a6c86306366baef08867cf7138a85324bd8669ea56d5887e8587c1a68371ffce843d33081deb8cf8458323fb2514ddbbcb2b6e7e2694336033e147ed25771c
-
SSDEEP
12582912:P1kxASeDKwKgQVOGSIdhvydvPgGmLR3MgO+ZyT+6rYO1bhN8Zc0jQ2:hSe981dhvyqgdTlrYO1bv8ljQ2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/BWAlternate.exe
Files
-
Brood War Alternate Public Release.zip.zip
-
BWAlternate.exe.exe windows:6 windows x86
56c93daf6f2875ae9e89e92066a32f5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
kernel32
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
GetProcAddress
ReleaseMutex
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
FindResourceW
LoadResource
SizeofResource
LockResource
SetLastError
GetTempPathW
GetLastError
CloseHandle
AddVectoredExceptionHandler
SetThreadStackGuarantee
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
SetFilePointerEx
ReadFile
GetModuleHandleA
TlsGetValue
TlsSetValue
GetCurrentDirectoryW
GetEnvironmentVariableW
GetModuleHandleW
FormatMessageW
GetModuleFileNameW
GetCommandLineW
CreateFileW
GetFileInformationByHandle
DeviceIoControl
GetFullPathNameW
CreateDirectoryW
GetStdHandle
GetConsoleMode
WriteFile
WriteConsoleW
TryEnterCriticalSection
LeaveCriticalSection
AcquireSRWLockShared
ReleaseSRWLockShared
GetThreadId
WaitForDebugEvent
GetThreadContext
ContinueDebugEvent
SuspendThread
CreatePipe
DuplicateHandle
WriteProcessMemory
GetEnvironmentStringsW
GetFinalPathNameByHandleW
FreeEnvironmentStringsW
CreateProcessW
TerminateProcess
GetProcessId
DebugActiveProcessStop
ResumeThread
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
SetThreadContext
VirtualAllocEx
ReadProcessMemory
LoadLibraryW
GetConsoleCP
FlushFileBuffers
HeapSize
LCMapStringW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
RtlUnwind
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsFree
FreeLibrary
LoadLibraryExW
RaiseException
ExitProcess
GetModuleHandleExW
GetCommandLineA
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
MultiByteToWideChar
WideCharToMultiByte
SetEnvironmentVariableW
SetStdHandle
GetFileType
GetStringTypeW
CompareStringW
DecodePointer
ole32
CoInitializeEx
CoCreateInstance
CoTaskMemFree
user32
MessageBoxW
Sections
.text Size: 223KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 792KB - Virtual size: 791KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Brood War Alternate/04 The Union/TERRAN 1.scx
-
Brood War Alternate/04 The Union/TERRAN 2.scx
-
Brood War Alternate/04 The Union/TERRAN 3.scx
-
Brood War Alternate/04 The Union/TERRAN 4.scx
-
Brood War Alternate/04 The Union/TERRAN 5.scx
-
Brood War Alternate/04 The Union/TERRAN 6.scx
-
Brood War Alternate/04 The Union/TERRAN 7.scx
-
Brood War Alternate/04 The Union/TERRAN 8.scx
-
Brood War Alternate/05 The Steel Claw/ZERG 1.scx
-
Brood War Alternate/05 The Steel Claw/ZERG 2.scx
-
Brood War Alternate/05 The Steel Claw/ZERG 3.scx
-
Brood War Alternate/05 The Steel Claw/ZERG 4.scx
-
Brood War Alternate/05 The Steel Claw/ZERG 5a.scx
-
Brood War Alternate/05 The Steel Claw/ZERG 5b.scx
-
Brood War Alternate/05 The Steel Claw/ZERG 6.scx
-
Brood War Alternate/05 The Steel Claw/ZERG 7.scx
-
Brood War Alternate/05 The Steel Claw/ZERG 8.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 01.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 02.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 03.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 04a.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 04b.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 04c.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 04d.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 04e.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 04f.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 05.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 06.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 07.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 08.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 09.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS 10.scx
-
Brood War Alternate/06 The Lord of Fire/PROTOSS BONUS.scx
-
StarCraft Alternate/01 Renegade Roar/ZERG 01.scx
-
StarCraft Alternate/01 Renegade Roar/ZERG 02.scx
-
StarCraft Alternate/01 Renegade Roar/ZERG 03.scx
-
StarCraft Alternate/01 Renegade Roar/ZERG 04.scx
-
StarCraft Alternate/01 Renegade Roar/ZERG 05.scx
-
StarCraft Alternate/01 Renegade Roar/ZERG 06.scx
-
StarCraft Alternate/01 Renegade Roar/ZERG 07.scx
-
StarCraft Alternate/01 Renegade Roar/ZERG 08.scx
-
StarCraft Alternate/01 Renegade Roar/ZERG 09.scx
-
StarCraft Alternate/01 Renegade Roar/ZERG 10.scx
-
StarCraft Alternate/02 Conclave/PROTOSS 01.scx
-
StarCraft Alternate/02 Conclave/PROTOSS 02.scx
-
StarCraft Alternate/02 Conclave/PROTOSS 03.scx
-
StarCraft Alternate/02 Conclave/PROTOSS 04.scx
-
StarCraft Alternate/02 Conclave/PROTOSS 05.scx
-
StarCraft Alternate/02 Conclave/PROTOSS 06.scx
-
StarCraft Alternate/02 Conclave/PROTOSS 07.scx
-
StarCraft Alternate/02 Conclave/PROTOSS 08.scx
-
StarCraft Alternate/02 Conclave/PROTOSS 09.scx
-
StarCraft Alternate/02 Conclave/PROTOSS 10.scx
-
StarCraft Alternate/03 The Unrest/TERRAN 01.scx
-
StarCraft Alternate/03 The Unrest/TERRAN 02.scx
-
StarCraft Alternate/03 The Unrest/TERRAN 03.scx
-
StarCraft Alternate/03 The Unrest/TERRAN 04.scx
-
StarCraft Alternate/03 The Unrest/TERRAN 05.scx
-
StarCraft Alternate/03 The Unrest/TERRAN 06.scx
-
StarCraft Alternate/03 The Unrest/TERRAN 07.scx
-
StarCraft Alternate/03 The Unrest/TERRAN 08.scx
-
StarCraft Alternate/03 The Unrest/TERRAN 09.scx
-
StarCraft Alternate/03 The Unrest/TERRAN 10.scx
-
readme.txt