Overview
overview
3Static
static
3The Transf...ta.dts
windows7-x64
1The Transf...ta.dts
windows10-2004-x64
1The Transf...me.exe
windows7-x64
1The Transf...me.exe
windows10-2004-x64
1The Transf...me.ini
windows7-x64
1The Transf...me.ini
windows10-2004-x64
1The Transf...ge.dat
windows7-x64
3The Transf...ge.dat
windows10-2004-x64
3The Transf...me.rts
windows7-x64
3The Transf...me.rts
windows10-2004-x64
3The Transf...em.dat
windows7-x64
3The Transf...em.dat
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
The Transfiguration Games 0.3/data.dts
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
The Transfiguration Games 0.3/data.dts
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
The Transfiguration Games 0.3/game.exe
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
The Transfiguration Games 0.3/game.exe
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
The Transfiguration Games 0.3/game.ini
Resource
win7-20231129-en
Behavioral task
behavioral6
Sample
The Transfiguration Games 0.3/game.ini
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
The Transfiguration Games 0.3/language.dat
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
The Transfiguration Games 0.3/language.dat
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
The Transfiguration Games 0.3/runtime.rts
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
The Transfiguration Games 0.3/runtime.rts
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
The Transfiguration Games 0.3/system.dat
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
The Transfiguration Games 0.3/system.dat
Resource
win10v2004-20240508-en
General
-
Target
The Transfiguration Games 0.3.zip
-
Size
146.8MB
-
MD5
2f7eee16676abc9d48bfd52141588812
-
SHA1
8c8ff13a9bbf2a1a5d2339410dbc416694321767
-
SHA256
d9074289d85a4f08b6cf98e024fdc25f11b091f05ff93e5379a1a23be1f3986c
-
SHA512
c0ecd7bf6660f046113f30bab2f74a37ff43b7c1c22ad540074aac8290e0fec288449cb0861ce529c1532380f73c8dc4e7c9e2eff53f28cfccbea3992ec1710a
-
SSDEEP
3145728:HBVEz7SrLjnxscLmKV1tYTuZ/8mxHZNa1mX5F9nfHIp94553v+ga:H/Y8jmcCO1tbZUmwAnwp9Q53Wga
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/The Transfiguration Games 0.3/game.exe
Files
-
The Transfiguration Games 0.3.zip.zip
-
The Transfiguration Games 0.3/data.dts
-
The Transfiguration Games 0.3/game.exe.exe windows:6 windows x86 arch:x86
210722c01bfd6f9f3bb0002d2487ca9b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
ReadFile
HeapFree
CreateFileW
GetLastError
CloseHandle
LoadLibraryW
GetProcAddress
GetFileSize
GetProcessHeap
LocalAlloc
LocalFree
FreeLibrary
GetSystemInfo
CreateFileMappingW
MapViewOfFile
GetNativeSystemInfo
VerSetConditionMask
VerifyVersionInfoW
UnmapViewOfFile
WideCharToMultiByte
WaitForSingleObject
CreateThread
WriteFile
GetTimeFormatEx
SetFilePointer
GetDateFormatEx
MultiByteToWideChar
GetLocalTime
lstrcmpiW
GetSystemTime
CreateEventW
SetEvent
SetEndOfFile
HeapSize
GetConsoleOutputCP
FlushFileBuffers
DecodePointer
HeapReAlloc
LCMapStringW
GlobalUnlock
GetStringTypeW
GetCurrentDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFileType
ReadConsoleW
GetConsoleMode
SetFilePointerEx
GetModuleHandleExW
GetStdHandle
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
SetLastError
RaiseException
RtlUnwind
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
WaitForSingleObjectEx
ResetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
lstrcatW
Sleep
GetPrivateProfileStringW
FindClose
GetModuleFileNameW
GetPrivateProfileIntW
FindNextFileW
GetModuleHandleW
GlobalLock
GlobalFree
GlobalAlloc
WriteConsoleW
lstrlenW
GetCommandLineW
WritePrivateProfileStringW
FindFirstFileW
CopyFileW
lstrcpynA
DeleteFileW
lstrcpyW
lstrcpyA
lstrlenA
lstrcpynW
lstrcmpA
CreateDirectoryW
SetStdHandle
GetFileAttributesW
lstrcmpW
ExitProcess
HeapDestroy
HeapAlloc
HeapCreate
user32
InvalidateRect
DrawTextW
wsprintfA
GetCursorPos
ChangeDisplaySettingsW
OffsetRect
wsprintfW
ReleaseDC
ReleaseCapture
PtInRect
CreateMenu
SetDlgItemInt
GetDlgItem
GetClientRect
SetWindowLongW
GetDlgItemInt
SetCapture
SetFocus
SetRect
SetMenuItemInfoW
GetParent
GetClassInfoExW
GetPropW
DeleteMenu
GetMenuItemCount
MessageBoxA
SetScrollInfo
GetMessageW
DefWindowProcW
GetSystemMenu
SetActiveWindow
DestroyWindow
FillRect
GetScrollInfo
RegisterClassExW
ShowWindow
DispatchMessageW
PeekMessageW
SetMenu
PostQuitMessage
GetDesktopWindow
UpdateWindow
LoadImageW
ShowCursor
BeginPaint
EndPaint
MessageBoxW
ClientToScreen
EnumDisplaySettingsW
SetCursorPos
SetPropW
GetWindowLongW
AdjustWindowRectEx
PostMessageW
GetWindowRect
GetMenu
InsertMenuItemW
GetDC
SetWindowPos
EnumChildWindows
CreateWindowExW
SendMessageW
EndDialog
GetSystemMetrics
SetWindowTextW
CreatePopupMenu
TrackPopupMenu
GetSubMenu
GetAsyncKeyState
GetCapture
DialogBoxIndirectParamW
DestroyMenu
gdi32
SetTextColor
SetBkMode
TextOutW
SelectObject
CreateFontW
GetTextExtentPoint32W
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
RoundRect
LineDDA
CreateSolidBrush
advapi32
CryptDecrypt
CryptDeriveKey
CryptHashData
CryptDestroyHash
IsTextUnicode
CryptEncrypt
CryptAcquireContextW
CryptDestroyKey
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
shell32
ShellExecuteW
SHGetKnownFolderPath
ole32
PropVariantClear
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
CoCreateInstance
CoUninitialize
CoInitialize
oleaut32
VariantInit
LoadTypeLi
SysStringByteLen
VariantClear
SysAllocString
SysFreeString
comctl32
ord16
dinput8
DirectInput8Create
setupapi
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
shlwapi
StrToIntExW
winmm
mmioStringToFOURCCW
mmioDescend
mmioAscend
mmioClose
mmioRead
mmioOpenW
timeGetTime
msacm32
acmStreamSize
acmStreamConvert
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmFormatSuggest
acmStreamOpen
acmStreamClose
dsound
ord11
Sections
.text Size: 763KB - Virtual size: 763KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 210KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
The Transfiguration Games 0.3/game.ini
-
The Transfiguration Games 0.3/language.dat
-
The Transfiguration Games 0.3/runtime.rts
-
The Transfiguration Games 0.3/system.dat