Sonic Before The Sequel[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Sonic Before The Sequel.exe
Size

102.2MB
MD5

bb8fdfeef676b4bb6d250dd68df311ba
SHA1

24d2912b14794fe215369350e19ae306734beab3
SHA256

ba751124def37669d086d4afb3be87f88ab71c1359aafdefd6e978890f02705a
SHA512

812906c9f1222d2c2eeb48613a0e149dade9c0cafc60583cb326426f7532502ececdf3042d480a322196047586d543c58235fe1efe73c6a294c982c2d83c8cdf
SSDEEP

3145728:lmAXjc4D6DPgI10buqtY8CIkZpjTriWBFBtWn:LXjcC6DYIIulPjFB+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Sonic Before The Sequel.exe

Files

Sonic Before The Sequel.exe
.exe windows:4 windows x86 arch:x86

61c41891423103c878fda5a8f204e4de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetExitCodeProcess
GetStartupInfoA
GetModuleHandleA
CreateProcessA
RaiseException
InterlockedExchange
LocalAlloc
GetTempFileNameA
GlobalDeleteAtom
GetVersion
GetVersionExA
GlobalAddAtomA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
lstrlenA
GlobalFree
GetTempPathA
GetCurrentDirectoryA
GetSystemTime
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
SetErrorMode
GlobalAlloc
GlobalLock
GlobalUnlock
GetCommandLineA
GetTickCount
SetCurrentDirectoryA
Sleep
CreateDirectoryA
GetProcAddress
CloseHandle
SetFilePointer
WriteFile
ReadFile
GetLastError
CreateFileA
GetCurrentThreadId
RemoveDirectoryA
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

SystemParametersInfoA
PostQuitMessage
IntersectRect
DrawFocusRect
SetRect
InvertRect
GetMenuStringA
ModifyMenuA
DefMDIChildProcA
IsIconic
GetUpdateRect
FillRect
SetDlgItemTextA
BeginPaint
EndPaint
GetDlgItem
MapVirtualKeyA
GetInputState
GetDlgItemTextA
SendDlgItemMessageA
EndDialog
DrawMenuBar
DestroyMenu
DrawEdge
GetMenuItemCount
SetWindowPlacement
GetWindowPlacement
GetFocus
RemovePropA
CallWindowProcA
SetPropA
GetPropA
UnionRect
CreateWindowExA
SetScrollRange
SetScrollPos
DestroyWindow
GetParent
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
DispatchMessageA
TranslateMessage
TranslateMDISysAccel
GetSysColor
SetFocus
GetDesktopWindow
RedrawWindow
DrawTextA
GetTabbedTextExtentA
LoadMenuIndirectA
GetMenuItemID
SetWindowLongA
UpdateWindow
GetMessageA
PeekMessageA
MsgWaitForMultipleObjects
ReleaseDC
CreateIconIndirect
GetDC
MapWindowPoints
WinHelpA
SetForegroundWindow
EnumThreadWindows
LoadStringA
MessageBoxA
DialogBoxParamA
GetTopWindow
GetClassNameA
GetWindow
LoadIconA
RegisterClassA
LoadImageA
RegisterClassExA
OemToCharA
GetAsyncKeyState
GetActiveWindow
ShowCursor
SetCapture
ReleaseCapture
GetKeyState
GetWindowRect
GetSystemMetrics
IsWindowVisible
LockWindowUpdate
SendMessageA
GetWindowLongA
AdjustWindowRectEx
IsZoomed
SetWindowPos
GetClientRect
SetWindowTextA
IsDialogMessageA
SetTimer
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsClipboardFormatAvailable
wsprintfA
ShowWindow
PostMessageA
CheckMenuItem
EnableMenuItem
GetMenu
InvalidateRect
ClientToScreen
SetCursorPos
GetKeyboardState
GetCursorPos
ScreenToClient
CopyRect
UnhookWindowsHookEx
KillTimer
SetWindowsHookExA
CallNextHookEx
DestroyIcon
GetMenuState
DeleteMenu
GetSubMenu
PtInRect

gdi32

LPtoDP
CreateRectRgn
SelectClipRgn
TextOutA
SetPolyFillMode
Polygon
CreateHatchBrush
DPtoLP
SetTextAlign
GetNearestPaletteIndex
SetBkColor
SetROP2
GetTextMetricsA
GetCharWidthA
GetTextExtentPointA
SetTextColor
SetBkMode
GetStockObject
CreateSolidBrush
CreatePen
Rectangle
SelectObject
MoveToEx
LineTo
GetObjectA
CreateFontIndirectA
SelectPalette
RealizePalette
GetDeviceCaps
CreatePalette
CreateBitmap
CreateCompatibleBitmap
SetDIBits
DeleteObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegQueryValueA
RegOpenKeyA
RegCloseKey

shell32

DragAcceptFiles
ShellExecuteA
DragQueryFileA

comctl32

ord17

winmm

timeEndPeriod
timeBeginPeriod
joyGetPosEx
joyGetDevCapsA
timeGetTime

msvcrt

_stricmp
strncpy
_errno
_rmdir
strrchr
strchr
strncat
_chdir
_mkdir
_ltoa
sprintf
_fcvt
_gcvt
__CxxFrameHandler
realloc
calloc
memmove
??2@YAPAXI@Z
remove
??3@YAXPAX@Z
_ftol
free
malloc
toupper
modf
atof
ceil
floor
_CIasin
_CIacos
strstr
_CIfmod
_CIpow
_heapmin
_msize
_splitpath
_findclose
_findnext
_findfirst
isspace
tolower
isdigit
isalpha
_makepath
_strnicmp
isalnum
_strupr
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_strlwr
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_chdrive

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

61c41891423103c878fda5a8f204e4de

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

winmm

msvcrt

Sections

.text Size: 300KB - Virtual size: 299KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 16KB - Virtual size: 14KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 300KB - Virtual size: 299KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 16KB - Virtual size: 14KB

.rsrc
Size: 32KB - Virtual size: 31KB