2024-05-22_f66fee9f84541ebb5fe52af2d24bbf75_megazord

Sharing

Copy URL Twitter E-mail

General

Target

2024-05-22_f66fee9f84541ebb5fe52af2d24bbf75_megazord
Size

43.8MB
MD5

f66fee9f84541ebb5fe52af2d24bbf75
SHA1

9df55a10782f5552d9b773d626c5175bfef9ef25
SHA256

7cb4f8bec30faca2381b82564fc5506744047488ce58e902302a4667700dc39c
SHA512

24722eca433af2b61bde7ef09c28a20050ea593e81a10239dcc85eeac12532995a07184218b527b8b22b4a14cb39443ac632a871ca02898e8d17d66f6ed592f6
SSDEEP

393216:bHJ00LIkZjycQyqp7KOtJ3Uv12uqxJREf5hW0iYAfhehmEHwMH3S2:7DqGNkEfse4EHwMHi2

Score

1^/10

Malware Config

Signatures

Files

2024-05-22_f66fee9f84541ebb5fe52af2d24bbf75_megazord
.exe windows:6 windows x64 arch:x64

ef2ee131eab72f1593393956526c1cb4

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29/04/2021, 00:00

Not After

28/04/2036, 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0c:37:77:3d:9d:48:b9:fa:17:7b:dd:ec:c2:5d:67:4c
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

28/11/2023, 00:00

Not After

27/11/2024, 23:59

Subject

SERIALNUMBER=201635710028,CN=Sony Interactive Entertainment LLC,O=Sony Interactive Entertainment LLC,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130a43616c69666f726e6961,1.3.6.1.4.1.311.60.2.1.3=#13025553

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14/07/2023, 00:00

Not After

13/10/2034, 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23/03/2022, 00:00

Not After

22/03/2037, 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01/08/2022, 00:00

Not After

09/11/2031, 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2f:c5:0d:58:a3:73:c2:08:50:8e:bb:9e:4d:ff:e5:81:8e:97:86:17
Signer

Actual PE Digest

2f:c5:0d:58:a3:73:c2:08:50:8e:bb:9e:4d:ff:e5:81:8e:97:86:17

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\dev\HRZ2-PCR\NIP\Assets\Game_Assets\NIP.WinGameSteam.Submission.DX12.pdb

Imports

kernel32

ReleaseSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
GetCurrentProcessId
OpenProcess
GetVersionExW
TerminateProcess
GetLogicalProcessorInformationEx
CreateThread
SizeofResource
LockResource
LoadResource
FindResourceW
LocalAlloc
LocalFree
LoadLibraryExW
SetEnvironmentVariableW
ExitProcess
GetLocaleInfoA
GetComputerNameA
GetModuleHandleExW
FormatMessageA
CloseThreadpool
GetFileSizeEx
CreateThreadpool
GetFullPathNameW
DeviceIoControl
SetFilePointer
TrySubmitThreadpoolCallback
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
SetThreadpoolThreadMaximum
GetLogicalProcessorInformation
CreateThreadpoolWait
GetThreadPriority
SetThreadpoolWait
ResetEvent
GetModuleHandleA
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
GetSystemTimeAsFileTime
GetTimeZoneInformation
FindNextFileW
ExpandEnvironmentStringsW
GetDriveTypeA
SetFileTime
GetFullPathNameA
SetEndOfFile
SetFileAttributesW
GetFileInformationByHandle
GetDiskFreeSpaceA
GetFileAttributesExW
DeleteFileW
GetOverlappedResult
CopyFileW
MoveFileW
GetFileTime
FlushFileBuffers
VirtualFree
VirtualAlloc
WakeAllConditionVariable
InitializeConditionVariable
WaitForSingleObjectEx
RegisterWaitForSingleObject
GlobalMemoryStatus
GetSystemInfo
VirtualQuery
OutputDebugStringA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFileEx
CancelIo
GetOverlappedResultEx
SetHandleInformation
SetThreadAffinityMask
CreateMutexA
ReleaseMutex
ResumeThread
DuplicateHandle
SwitchToThread
SetThreadGroupAffinity
SetThreadPriorityBoost
SleepConditionVariableSRW
CreateSemaphoreA
WaitForMultipleObjectsEx
GetModuleFileNameA
GetCommandLineW
SetErrorMode
GetModuleHandleExA
GetComputerNameExA
VirtualQueryEx
GetTickCount
TryEnterCriticalSection
DecodePointer
SetLastError
TerminateThread
SetConsoleTitleA
TlsSetValue
TlsAlloc
TlsFree
WriteConsoleA
GetConsoleWindow
OutputDebugStringW
GetSystemDirectoryW
lstrcmpA
FileTimeToSystemTime
VerifyVersionInfoW
VerSetConditionMask
SetThreadContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
InitializeSListHead
SetWaitableTimer
CancelWaitableTimer
CreateWaitableTimerW
SetFileInformationByHandle
ExitThread
GetExitCodeThread
GetStringTypeW
GetNativeSystemInfo
RtlPcToFileHeader
EncodePointer
LCMapStringEx
GetLocaleInfoW
GetModuleHandleW
SetThreadExecutionState
CompareStringEx
GetCPInfo
VirtualProtect
InitializeCriticalSectionAndSpinCount
IsDebuggerPresent
InitializeSRWLock
GlobalMemoryStatusEx
SetStdHandle
LoadLibraryExA
RtlUnwindEx
TlsGetValue
FreeLibraryAndExitThread
GetFileType
HeapSize
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetCurrentProcessorNumber
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
SetUnhandledExceptionFilter
GetThreadContext
AddVectoredExceptionHandler
LoadLibraryA
WaitForMultipleObjects
InitializeCriticalSectionEx
GetOEMCP
HeapReAlloc
GetProcessHeap
FindFirstFileExW
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
AllocConsole
GetCurrentDirectoryW
FreeConsole
GetStdHandle
SetConsoleScreenBufferSize
GetSystemPreferredUILanguages
MultiByteToWideChar
CreateEventW
RemoveVectoredExceptionHandler
CreateSemaphoreW
ReleaseSemaphore
DeleteCriticalSection
CreateEventExW
K32EnumProcessModules
K32GetModuleInformation
K32GetModuleBaseNameA
GetCurrentThread
RtlCaptureContext
QueryPerformanceCounter
GetTempFileNameA
CreateProcessA
GetComputerNameW
GetFileSize
GetLocalTime
DeleteFileA
QueryPerformanceFrequency
CreateFileA
GetTempPathA
Sleep
CreateFileW
WriteFile
ReadFile
GetLastError
CreateEventA
SetProcessWorkingSetSize
GetSystemTime
WideCharToMultiByte
FreeLibrary
SystemTimeToFileTime
GetProcAddress
LoadLibraryW
RaiseException
MulDiv
FindClose
SetConsoleTextAttribute
FindFirstFileW
CloseHandle
SetEvent
K32GetProcessMemoryInfo
GetTickCount64
GetCurrentThreadId
GetFileAttributesW
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
GetLocaleInfoEx
GetModuleFileNameW
RemoveDirectoryW
EnterCriticalSection
GetPhysicallyInstalledSystemMemory
GetGeoInfoA
CreateDirectoryW
GetCommandLineA
GetCurrentProcess
SetPriorityClass

user32

CreateWindowExA
DefWindowProcA
RegisterClassA
SystemParametersInfoA
PeekMessageA
UnregisterClassA
GetCursorPos
MessageBoxA
EnumDisplaySettingsA
GetWindowLongW
SetPropA
SendDlgItemMessageW
IsDlgButtonChecked
GetPropA
CheckDlgButton
EnableWindow
LoadBitmapW
IsWindowVisible
LoadCursorA
DispatchMessageA
GetMessageA
AdjustWindowRectEx
LoadIconW
LoadCursorW
IsWindow
GetLastInputInfo
LoadImageW
GetWindowThreadProcessId
GetForegroundWindow
RegisterWindowMessageW
FillRect
EnumDisplayMonitors
GetMonitorInfoW
EnumDisplayDevicesW
DisplayConfigGetDeviceInfo
EnumDisplaySettingsW
DestroyWindow
GetDC
SetActiveWindow
UnregisterClassW
WaitMessage
GetActiveWindow
PeekMessageW
GetUpdateRect
DrawTextW
UpdateWindow
DrawFrameControl
BeginPaint
EndPaint
SendInput
GetPhysicalCursorPos
LogicalToPhysicalPoint
MapVirtualKeyW
ScreenToClient
GetRawInputDeviceInfoW
GetKeyboardLayoutNameW
GetKeyboardLayout
SetPhysicalCursorPos
PhysicalToLogicalPoint
RegisterRawInputDevices
ActivateKeyboardLayout
GetKeyNameTextW
GetRawInputDeviceList
SetCursorPos
DefWindowProcW
GetSystemMenu
PostMessageW
InsertMenuItemW
MonitorFromWindow
SetWindowLongPtrW
CreateWindowExW
GetWindowLongPtrW
RegisterClassExW
SetWindowPlacement
GetRawInputData
AdjustWindowRect
DrawMenuBar
CheckMenuItem
PostQuitMessage
GetParent
InvalidateRect
IsIconic
SetClassLongPtrW
GetCursorInfo
ClientToScreen
ClipCursor
SetCursor
GetClientRect
ShowCursor
GetKeyState
GetWindowRect
SetWindowPos
SendMessageW
EndDialog
SetWindowTextW
ShowWindow
SetTimer
SetWindowTextA
SetFocus
FlashWindowEx
GetDlgItem
KillTimer
DialogBoxParamW
SetForegroundWindow
GetMessageW
MessageBoxW
GetSystemMetrics
DispatchMessageW
IntersectRect
TranslateMessage
PostThreadMessageW
SystemParametersInfoW
ReleaseDC

usp10

ScriptShape
ScriptItemize

gdi32

AddFontResourceExW
GetStockObject
RemoveFontMemResourceEx
DeleteObject
SetStretchBltMode
GetObjectW
SetBkMode
DeleteDC
GetDeviceCaps
CreateFontW
GetTextExtentPointW
StretchBlt
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
SetTextColor
Polyline
BitBlt
AddFontMemResourceEx
GetGlyphOutlineW
CreateFontIndirectA
GetGlyphOutlineA
GetGlyphIndicesW

advapi32

EventSetInformation
EventWriteTransfer
EventRegister
EventUnregister
RegQueryValueExA
RegOpenKeyExA
GetUserNameA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegGetValueA
RegCreateKeyExA
RegQueryValueExW
GetUserNameW
RegOpenKeyExW
RegCloseKey
RegSetValueExA

shell32

ShellExecuteW
SHGetFolderPathW
SHCreateDirectoryExW
ShellExecuteExW

ole32

PropVariantClear
CLSIDFromString
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoCreateGuid
CoInitializeEx
CoUninitialize

shlwapi

ord219
PathIsDirectoryEmptyW

setupapi

SetupDiGetDeviceInterfacePropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInterfaces
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW
SetupDiDestroyDeviceInfoList

dbghelp

MiniDumpWriteDump

winhttp

WinHttpSendRequest
WinHttpSetTimeouts
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpCloseHandle
WinHttpConnect
WinHttpOpenRequest
WinHttpReadData
WinHttpQueryHeaders
WinHttpWriteData
WinHttpAddRequestHeaders
WinHttpReceiveResponse
WinHttpSetStatusCallback

api-ms-win-core-synch-l1-2-0

WakeByAddressAll
WaitOnAddress

hid

HidD_GetSerialNumberString
HidD_GetProductString
HidD_SetFeature
HidD_FreePreparsedData
HidD_GetPreparsedData
HidD_GetAttributes
HidP_GetValueCaps
HidP_GetCaps
HidD_GetHidGuid
HidD_GetFeature
HidD_GetManufacturerString

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime
timeGetDevCaps

faultrep

ReportFault

bcrypt

BCryptDestroyHash
BCryptHashData
BCryptCreateHash
BCryptFinishHash
BCryptGetProperty
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider

crypt32

CryptBinaryToStringA
CryptBinaryToStringW

steam_api64

SteamInternal_ContextInit
SteamAPI_UnregisterCallResult
SteamAPI_RestartAppIfNecessary
SteamInternal_SteamAPI_Init
SteamAPI_RegisterCallResult
SteamAPI_Shutdown
SteamAPI_RunCallbacks
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamAPI_GetHSteamUser
SteamInternal_FindOrCreateUserInterface
SteamAPI_IsSteamRunning

uxtheme

EnableThemeDialogTexture

ws2_32

connect
htonl
WSARecvFrom
ioctlsocket
setsockopt
WSAGetLastError
socket
getsockname
WSAStartup
WSACleanup
__WSAFDIsSet
accept
bind
closesocket
select
WSASend
shutdown
listen
recv
WSASendTo

Exports

Exports

AmdPowerXpressRequestHighPerformance
D3D12SDKPath
D3D12SDKVersion
GameMainProg
MainProg
NVSDK_NGX_D3D12_AllocateParameters
NVSDK_NGX_D3D12_CreateFeature
NVSDK_NGX_D3D12_DestroyParameters
NVSDK_NGX_D3D12_EvaluateFeature
NVSDK_NGX_D3D12_EvaluateFeature_C
NVSDK_NGX_D3D12_GetCapabilityParameters
NVSDK_NGX_D3D12_GetFeatureRequirements
NVSDK_NGX_D3D12_GetParameters
NVSDK_NGX_D3D12_GetScratchBufferSize
NVSDK_NGX_D3D12_ReleaseFeature
NVSDK_NGX_D3D12_Shutdown
NVSDK_NGX_D3D12_Shutdown1
NVSDK_NGX_Parameter_GetD
NVSDK_NGX_Parameter_GetD3d11Resource
NVSDK_NGX_Parameter_GetD3d12Resource
NVSDK_NGX_Parameter_GetF
NVSDK_NGX_Parameter_GetI
NVSDK_NGX_Parameter_GetUI
NVSDK_NGX_Parameter_GetULL
NVSDK_NGX_Parameter_GetVoidPointer
NVSDK_NGX_Parameter_SetD
NVSDK_NGX_Parameter_SetD3d11Resource
NVSDK_NGX_Parameter_SetD3d12Resource
NVSDK_NGX_Parameter_SetF
NVSDK_NGX_Parameter_SetI
NVSDK_NGX_Parameter_SetUI
NVSDK_NGX_Parameter_SetULL
NVSDK_NGX_Parameter_SetVoidPointer
NVSDK_NGX_UpdateFeature
NvOptimusEnablement

Sections

.text
Size: 23.3MB - Virtual size: 23.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5.3MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6.1MB - Virtual size: 110.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ef2ee131eab72f1593393956526c1cb4

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

0c:37:77:3d:9d:48:b9:fa:17:7b:dd:ec:c2:5d:67:4cCertificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

2f:c5:0d:58:a3:73:c2:08:50:8e:bb:9e:4d:ff:e5:81:8e:97:86:17Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

usp10

gdi32

advapi32

shell32

ole32

shlwapi

setupapi

dbghelp

winhttp

api-ms-win-core-synch-l1-2-0

hid

winmm

faultrep

bcrypt

crypt32

steam_api64

uxtheme

ws2_32

Exports

Exports

Sections

.text Size: 23.3MB - Virtual size: 23.3MB

.rdata Size: 5.3MB - Virtual size: 5.3MB

.data Size: 6.1MB - Virtual size: 110.9MB

.pdata Size: 1.2MB - Virtual size: 1.2MB

_RDATA Size: 78KB - Virtual size: 78KB

.rsrc Size: 7.4MB - Virtual size: 7.4MB

.reloc Size: 478KB - Virtual size: 478KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

0c:37:77:3d:9d:48:b9:fa:17:7b:dd:ec:c2:5d:67:4c
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

2f:c5:0d:58:a3:73:c2:08:50:8e:bb:9e:4d:ff:e5:81:8e:97:86:17
Signer

.text
Size: 23.3MB - Virtual size: 23.3MB

.rdata
Size: 5.3MB - Virtual size: 5.3MB

.data
Size: 6.1MB - Virtual size: 110.9MB

.pdata
Size: 1.2MB - Virtual size: 1.2MB

_RDATA
Size: 78KB - Virtual size: 78KB

.rsrc
Size: 7.4MB - Virtual size: 7.4MB

.reloc
Size: 478KB - Virtual size: 478KB