73a691e2d48d0345db646b6c1ba64e70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73a691e2d48d0345db646b6c1ba64e70
Size

197KB
MD5

73a691e2d48d0345db646b6c1ba64e70
SHA1

f40b1def118e1b8134cf69104e96c720d910a8f6
SHA256

3a0ed9bf8c000532ddfd6d7e3fd11d632183bf7612425218a97c8d68fe21254c
SHA512

19835fd1df582a41d8299a1f87eb813078d0947ac8f90fb9d8336f60775b0795b34416c5a5c33f6eb156720e20f30b730582d4cf788fb8482bfd448446c755c8
SSDEEP

3072:H27m63KB/PvCIHPgNB5VQf0KkKEsaajOV9jzmRhpRVPsNoyc/0SVd1uw6/D0kh:WS632HCIHcg0aEZV9jukNJITVdswO0kh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Battlefield Heroes Hungary Pack.exe

Files

73a691e2d48d0345db646b6c1ba64e70
.rar
Battlefield Heroes Hungary Pack.exe
.exe windows:4 windows x86 arch:x86

d221b1dc8c3a08622f6512e7876527c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateDirectoryA
lstrcpyA
CreateFileA
GetFileAttributesA
lstrlenA
GetTempPathA
lstrcmpA
lstrcatA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetStartupInfoA

user32

MessageBoxA
wsprintfA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gentee
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ