TempleGolem[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

TempleGolem.exe
Size

213KB
MD5

778cc9edd7783bc54f042eff86dd6e45
SHA1

80452fa580b1d24adab7048a9787126272c6c397
SHA256

67bf1d58d2ca8e4f76ba8813d1da7a5b2fa7b764bdd93d27cf7cb4a5f000943d
SHA512

629094a9f4eab05c2b1720b3c1148ae1859a6f6a9c4f17414f1d4e7af59917508c4c4e0fc2a50b1abda0ba7f89ef4eefae98bce5984635ed87114dfe655e9123
SSDEEP

6144:sOeNwIVnMx4h9m0CNOel+STZSTJYZ0+IcTriv:DeoFZRl+StShdv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TempleGolem.exe

Files

TempleGolem.exe
.exe windows:4 windows x86 arch:x86

00b0e4c0f0179b0a3135833edfc7238c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetCommandLineW
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LocalFree
MultiByteToWideChar
SetUnhandledExceptionFilter
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

_getpid
_putenv
_strdup
_stricoll
__getmainargs
__mb_cur_max
__p__environ
__p__fmode
__set_app_type
_cexit
_errno
_fpreset
_fullpath
_iob
_isctype
_onexit
_pctype
_setmode
abort
atexit
atoi
calloc
fclose
fopen
fputc
fread
free
fscanf
fseek
fwrite
getenv
isprint
localeconv
malloc
mbstowcs
memcpy
memset
realloc
setlocale
signal
sscanf
strcat
strchr
strcmp
strcoll
strcpy
strlen
strncpy
tolower
vfprintf
wcslen
wcstombs

shell32

CommandLineToArgvW

sdl2

SDL_CreateRGBSurfaceFrom
SDL_CreateRenderer
SDL_CreateTexture
SDL_CreateTextureFromSurface
SDL_CreateWindow
SDL_Delay
SDL_DestroyTexture
SDL_DestroyWindow
SDL_FreeSurface
SDL_GetTicks
SDL_Init
SDL_PollEvent
SDL_Quit
SDL_RenderClear
SDL_RenderCopy
SDL_RenderPresent
SDL_SetMainReady
SDL_SetRenderTarget
SDL_SetWindowFullscreen
SDL_SetWindowPosition
SDL_SetWindowSize
SDL_SetWindowTitle
SDL_ShowSimpleMessageBox
SDL_StartTextInput
SDL_StopTextInput
SDL_free
SDL_iconv_string
SDL_strlen
SDL_wcslen

sdl2_image

IMG_Init
IMG_LoadTexture

sdl2_ttf

TTF_CloseFont
TTF_Init
TTF_OpenFont
TTF_RenderText_Solid

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/14
Size: 512B - Virtual size: 152B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/41
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/55
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/67
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/80
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/91
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/102
Size: 512B - Virtual size: 168B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00b0e4c0f0179b0a3135833edfc7238c

Headers

File Characteristics

Imports

kernel32

msvcrt

shell32

sdl2

sdl2_image

sdl2_ttf

Sections

.text Size: 102KB - Virtual size: 101KB

.data Size: 512B - Virtual size: 112B

.rdata Size: 23KB - Virtual size: 22KB

/4 Size: 17KB - Virtual size: 17KB

.bss Size: - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 3KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

/14 Size: 512B - Virtual size: 152B

/29 Size: 20KB - Virtual size: 19KB

/41 Size: 2KB - Virtual size: 1KB

/55 Size: 2KB - Virtual size: 1KB

/67 Size: 512B - Virtual size: 244B

/80 Size: 512B - Virtual size: 11B

/91 Size: 3KB - Virtual size: 3KB

/102 Size: 512B - Virtual size: 168B

.text
Size: 102KB - Virtual size: 101KB

.data
Size: 512B - Virtual size: 112B

.rdata
Size: 23KB - Virtual size: 22KB

/4
Size: 17KB - Virtual size: 17KB

.bss
Size: - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 3KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

/14
Size: 512B - Virtual size: 152B

/29
Size: 20KB - Virtual size: 19KB

/41
Size: 2KB - Virtual size: 1KB

/55
Size: 2KB - Virtual size: 1KB

/67
Size: 512B - Virtual size: 244B

/80
Size: 512B - Virtual size: 11B

/91
Size: 3KB - Virtual size: 3KB

/102
Size: 512B - Virtual size: 168B