gamesensecracked[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

gamesensecracked.rar
Size

1.0MB
MD5

7e174a54c089a6a0f50da11f650267d2
SHA1

157cb3777c132c10e4bfe642196e13f95f0e7853
SHA256

eec79d5651a3bd38f712958f7c82360c11c3b81efabcb12ce8c265a7c5b06821
SHA512

18462c8b88f46adaf27984e34a66dbb412fbfa30a157427479e2946f1cdb8b79dcbdeb3ac7207c4b40a05dddd45b9122429c69c8ecb0b9a4e33c64667e847062
SSDEEP

24576:45cPAtwLrAFIjnstq21MNGGiEHIJajVjDbTWUBLFHbV:iXtwHAFI7SMJiEHIJuVjDbTWULh

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

resource
unpack001/gamsesenseloader.exe
unpack001/pastesense.dll
unpack001/patcher.dll

Files

gamesensecracked.rar
.rar
gamsesenseloader.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

Depositor.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
hvhforpaste.txt
pastesense.dll
.dll windows:6 windows x64 arch:x64

baea9d6945cedc883d2caca7cb5b4bd0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\asilh\Downloads\Skinchanger\Skinchanger\bin\BebraChanger Release x64.pdb

Imports

d3d11

D3D11CreateDeviceAndSwapChain

psapi

GetMappedFileNameA

kernel32

FormatMessageA
VirtualQuery
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetModuleHandleA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
FreeLibraryAndExitThread
CloseHandle
CreateThread
K32GetModuleInformation
GetLastError
GetCurrentProcessId
GetConsoleWindow
ReadFile
GetFileSizeEx
HeapFree
UnmapViewOfFile
CreateFileA
HeapAlloc
CreateFileMappingA
MapViewOfFile
GetModuleHandleExA
IsDebuggerPresent
VirtualAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualProtect
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
GetSystemTimeAsFileTime
RtlCaptureContext
DisableThreadLibraryCalls
InitializeSListHead
RtlLookupFunctionEntry

user32

CallWindowProcA
EnumWindows
SetWindowLongPtrA
GetKeyState
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
GetWindowThreadProcessId
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
GetCursorPos
OpenClipboard
CloseClipboard
GetWindow
EmptyClipboard
GetClipboardData
SetClipboardData
SetCapture
IsWindowVisible
SetCursorPos

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext

d3dcompiler_47

D3DCompile

msvcp140

_Query_perf_counter
_Xtime_get_ticks
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
_Thrd_sleep
_Query_perf_frequency

vcruntime140_1

__CxxFrameHandler4

vcruntime140

strrchr
__current_exception
__current_exception_context
__C_specific_handler
memset
_CxxThrowException
__std_type_info_destroy_list
longjmp
__std_terminate
strstr
__std_exception_destroy
__std_exception_copy
memchr
__intrinsic_setjmp
memmove
memcpy
memcmp

api-ms-win-crt-stdio-l1-1-0

fputc
fopen
fflush
fclose
__stdio_common_vfprintf
__stdio_common_vsscanf
fread
_wfopen
fwrite
__stdio_common_vsprintf
fseek
__acrt_iob_func
ftell
fputs

api-ms-win-crt-string-l1-1-0

strncmp
strncpy
strcmp

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

api-ms-win-crt-convert-l1-1-0

strtol
atof

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_initterm
_initterm_e
terminate
_seh_filter_dll
_configure_narrow_argv
_execute_onexit_table
_register_onexit_function
_initialize_narrow_environment
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-math-l1-1-0

pow
logf
log
powf
sinf
fmodf
sqrtf
cosf
ceilf
acosf

Sections

.text
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 258KB - Virtual size: 257KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
patcher.dll
.dll windows:6 windows x86 arch:x86

9c6300cd851b7cffd03b4b888a6f4bd1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\Admin\source\repos\vac3_bypasser\output\release\patcher.pdb

Imports

kernel32

CreateFileMappingA
FreeLibrary
FreeLibraryAndExitThread
GetModuleHandleA
Sleep
CloseHandle
CreateThread
AttachConsole
FreeConsole
GetConsoleWindow
AllocConsole
VirtualAlloc
Thread32Next
Thread32First
CreateToolhelp32Snapshot
GetModuleHandleW
ResumeThread
SuspendThread
SetThreadContext
GetThreadContext
OpenThread
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
HeapCreate
VirtualProtect
FlushInstructionCache
GetProcAddress
InterlockedCompareExchange
InterlockedExchange
VirtualQuery
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetProcessHeap
GetLastError
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
VirtualFree

user32

PostMessageW
GetAsyncKeyState

msvcp140

_Query_perf_frequency
_Thrd_sleep
_Query_perf_counter
_Xtime_get_ticks
?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
memset
_except_handler4_common
__std_type_info_destroy_list
__vcrt_GetModuleFileNameW
__vcrt_LoadLibraryExW
__std_terminate
memmove
_CxxThrowException
memcpy

api-ms-win-crt-heap-l1-1-0

free
_callnewh
malloc

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
freopen_s
fclose
__stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-string-l1-1-0

strcat_s
strcpy_s

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
readme.txt

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 587KB - Virtual size: 586KB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 512B - Virtual size: 12B

baea9d6945cedc883d2caca7cb5b4bd0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

d3d11

psapi

kernel32

user32

imm32

d3dcompiler_47

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 616KB - Virtual size: 615KB

.rdata Size: 258KB - Virtual size: 257KB

.data Size: 13KB - Virtual size: 16KB

.pdata Size: 17KB - Virtual size: 16KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 3KB - Virtual size: 3KB

9c6300cd851b7cffd03b4b888a6f4bd1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 1KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 587KB - Virtual size: 586KB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 512B - Virtual size: 12B

.text
Size: 616KB - Virtual size: 615KB

.rdata
Size: 258KB - Virtual size: 257KB

.data
Size: 13KB - Virtual size: 16KB

.pdata
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 1KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 2KB - Virtual size: 1KB