Static task
static1
Behavioral task
behavioral1
Sample
journey.to.the.savage.planet.v49238.plus.7.trainer.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
journey.to.the.savage.planet.v49238.plus.7.trainer.exe
Resource
win10v2004-20231222-en
General
-
Target
3d93b2183650fc586a650ecf812cfefa
-
Size
532KB
-
MD5
3d93b2183650fc586a650ecf812cfefa
-
SHA1
2e8a7802593674637242fa7fc05895718efc1477
-
SHA256
50163fd4b9e206f7b2605195c3357ad357c8ab9310ac4b1a0acc9e8d740c77f6
-
SHA512
f0cf199623586a6b1912a07fcf61b2d6d09746423c973bafb22c7fbfb97ce8b94e6932f900c46e902656af9a1f10d8e41169d30bb6ba2e04e129ce97df97ee29
-
SSDEEP
12288:SA+Wf6ErIbuP9pYnBUwBrBsbAIdhoWMspSSAdH:Sg6E8buPXYnuK9syspD6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/journey.to.the.savage.planet.v49238.plus.7.trainer.exe
Files
-
3d93b2183650fc586a650ecf812cfefa.rar
-
journey.to.the.savage.planet.v49238.plus.7.trainer.exe.exe windows:1 windows x64 arch:x64
ac1e69815c2b0dcd8157728cc73934e6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
Beep
CreateToolhelp32Snapshot
ExitProcess
FindResourceA
GetModuleHandleA
LoadResource
LockResource
Module32First
OpenProcess
Process32First
Process32Next
ReadProcessMemory
Sleep
VirtualProtectEx
WriteProcessMemory
lstrcmpiA
user32
BeginPaint
DialogBoxParamA
EnableWindow
EndDialog
EndPaint
GetAsyncKeyState
GetClientRect
GetDlgItem
GetDlgItemTextA
KillTimer
LoadBitmapA
LoadIconA
MessageBoxA
ReleaseCapture
SendDlgItemMessageA
SendMessageA
SetDlgItemTextA
SetTimer
ShowWindow
wsprintfA
gdi32
BitBlt
CreateCompatibleDC
GetStockObject
SelectObject
SetBkColor
SetBkMode
SetTextColor
winmm
PlaySound
advapi32
AllocateAndInitializeSid
CheckTokenMembership
comctl32
InitCommonControls
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ