CampMassacre[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

CampMassacre.exe
Size

74.0MB
MD5

a3c1032cf8cc04db8e6bb46056f9faf3
SHA1

92f39d054dcf205c0e6941b52d8da3bf90b46b8b
SHA256

4bff77fb33df0c13600f71147fd55bd4c774a854cb3c5c6d8d7721f8ad466f5f
SHA512

d49b3efa89bce5b4ccba5e823c28288bb9db3f889fc7fec3f4eb8aedb7e8fde735facc88a0a46e0f6554ea5dc8699ba89e2535581effa5549d1d52ea6f43fd42
SSDEEP

1572864:WtTufkRdFQFSd/IBoc1q+0xFSR/rvKlkv2s1IHsfCxQCsx:WtTufkRdFQFy/IBogq+w0R/rvKYIMqx6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CampMassacre.exe

Files

CampMassacre.exe
.exe windows:6 windows x64 arch:x64

6dccb47408c5c64cbf44abd4aafc1a8d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\LinkedFromC\Development\irrTech\flace\win32player\x64\Release\win32player.pdb

Imports

kernel32

GetCommandLineW
LoadLibraryA
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
GetModuleFileNameW
WaitForSingleObject
OutputDebugStringA
WriteConsoleW
HeapSize
SetEndOfFile
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
GetConsoleCP
GetFileAttributesExW
CreateProcessA
GetExitCodeProcess
HeapReAlloc
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
CreateDirectoryW
GetStringTypeW
HeapAlloc
HeapFree
ReadConsoleW
GetConsoleMode
GetACP
GetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
PeekNamedPipe
GetFileType
GetFileInformationByHandle
CreateFileW
SetFilePointerEx
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileExW
FindClose
GetModuleHandleExW
ExitProcess
WideCharToMultiByte
GetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
GetFullPathNameA
GetDriveTypeW
DeleteFileW
ReadFile
EncodePointer
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
RaiseException
RtlPcToFileHeader
RtlUnwindEx
ResumeThread
SetThreadPriority
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
ExpandEnvironmentStringsA
FormatMessageA
Sleep
GetVersionExA
lstrcmpiA
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThread
GetSystemInfo
GetTickCount
SetThreadAffinityMask
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalMemoryStatus
WinExec
MultiByteToWideChar
GetFullPathNameW
SetErrorMode
VirtualAlloc
VirtualFree
GetSystemTimeAsFileTime
GetSystemTimeAdjustment
GetLastError
SleepEx
SetLastError
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileA
WriteFile
GetTempPathA
CloseHandle
GlobalFree
LocalAlloc
MulDiv

user32

LoadIconA
MessageBoxA
SendMessageA
RegisterClassA
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplaySettingsA
ChangeDisplaySettingsA
LoadImageA
DispatchMessageA
PeekMessageA
SendMessageTimeoutA
SendMessageTimeoutW
DefWindowProcA
PostQuitMessage
RegisterClassExA
CreateWindowExA
DestroyWindow
ShowWindow
MoveWindow
SetWindowPos
GetWindowPlacement
GetActiveWindow
GetFocus
TranslateMessage
ToAscii
MapVirtualKeyA
GetCapture
SetCapture
ReleaseCapture
GetSystemMetrics
UpdateWindow
SetActiveWindow
SetForegroundWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
GetClientRect
GetWindowRect
AdjustWindowRect
SetCursorPos
SetCursor
GetCursorPos
ClientToScreen
FillRect
SetWindowLongPtrA
LoadCursorA
GetKeyboardState

advapi32

RegQueryValueExA
RegOpenKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

shell32

CommandLineToArgvW
ShellExecuteExW

shlwapi

PathRelativePathToA

opengl32

glDisableClientState
glDrawArrays
glDrawElements
glEnable
glEnableClientState
glEnd
glFlush
glFogf
glFogfv
glFogi
glFrontFace
glGetBooleanv
glGetError
glGetFloatv
glGetString
glHint
glLightModelfv
glLightModeli
wglCreateContext
wglDeleteContext
wglGetProcAddress
wglMakeCurrent
glAlphaFunc
glBegin
glBindTexture
glBlendFunc
glClear
glClearColor
glClearDepth
glClipPlane
glColor4ub
glColorMask
glColorPointer
glCullFace
glDepthFunc
glDepthMask
glLightf
glTexSubImage2D
glTexImage2D
glGetTexImage
glGenTextures
glDeleteTextures
glCopyTexSubImage2D
glGetIntegerv
glViewport
glVertexPointer
glVertex3f
glVertex2i
glVertex2f
glTranslatef
glTexParameteri
glTexParameterf
glTexGeni
glTexEnvi
glTexEnvf
glTexCoordPointer
glTexCoord2f
glStencilOp
glStencilMask
glStencilFunc
glShadeModel
glScissor
glRectf
glReadPixels
glReadBuffer
glPushMatrix
glPushAttrib
glPopMatrix
glPopAttrib
glPolygonOffset
glPolygonMode
glPointSize
glPixelStorei
glNormalPointer
glMatrixMode
glMaterialfv
glMaterialf
glLoadMatrixf
glLoadIdentity
glLineWidth
glLightfv
glDisable

wsock32

WSAGetLastError
recv
send
bind
connect
getpeername
getsockname
getsockopt
htons
ntohs
WSACleanup
socket
__WSAFDIsSet
select
WSASetLastError
recvfrom
sendto
accept
listen
inet_ntoa
gethostname
closesocket
setsockopt
WSAStartup

ws2_32

freeaddrinfo
getaddrinfo

winmm

waveOutPrepareHeader
waveOutWrite
waveOutOpen
timeEndPeriod
timeBeginPeriod
waveOutClose
waveOutUnprepareHeader
waveOutReset

gdi32

GetPixelFormat
DescribePixelFormat
ChoosePixelFormat
TextOutW
GetObjectA
SetTextColor
SetWindowExtEx
SetViewportExtEx
StretchDIBits
SetMapMode
SetPixelFormat
SelectObject
SetPixel
SetBkMode
GetStockObject
Rectangle
GetTextExtentPoint32W
GetDIBits
GetDeviceCaps
DeleteObject
DeleteDC
CreatePen
CreateFontA
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
SwapBuffers

ole32

CoCreateInstance
CoInitialize
CoUninitialize

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 173KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6dccb47408c5c64cbf44abd4aafc1a8d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

shell32

shlwapi

opengl32

wsock32

ws2_32

winmm

gdi32

ole32

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 1.0MB - Virtual size: 1.0MB

.data Size: 173KB - Virtual size: 183KB

.pdata Size: 153KB - Virtual size: 153KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 43KB - Virtual size: 42KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 1.0MB - Virtual size: 1.0MB

.data
Size: 173KB - Virtual size: 183KB

.pdata
Size: 153KB - Virtual size: 153KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 43KB - Virtual size: 42KB