C:\assemblage\Builds\4243296072684278869zhemulnqdj\Tetris-main\assemblage_outdir_bin\Tetris.pdb
Static task
static1
Behavioral task
behavioral1
Sample
50fb6ac519f4ae500aca41041275275bbac60670867d4c6dedeac6a2faec9294.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
50fb6ac519f4ae500aca41041275275bbac60670867d4c6dedeac6a2faec9294.exe
Resource
win10v2004-20240508-en
General
-
Target
50fb6ac519f4ae500aca41041275275bbac60670867d4c6dedeac6a2faec9294
-
Size
112KB
-
MD5
825771a6cb2d91745a8a18b6ade90081
-
SHA1
7e2106cc84c628bf993bd30d63d49ebc7b5cee30
-
SHA256
50fb6ac519f4ae500aca41041275275bbac60670867d4c6dedeac6a2faec9294
-
SHA512
2dc0d4eb60ce4a95a5d0237c561ebe45319585f288c8db23a11f5070038a2432a5fdeae5a4780a6c6ae7efb376ee0a0d6a09e64f1e606cf7c5f99eb1b6a5067d
-
SSDEEP
768:ogRrJkdoaOa2wUrz12dxG3O51YbHc9Sbh9Sb:DLz12dxG3k6cC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 50fb6ac519f4ae500aca41041275275bbac60670867d4c6dedeac6a2faec9294
Files
-
50fb6ac519f4ae500aca41041275275bbac60670867d4c6dedeac6a2faec9294.exe windows:6 windows x64 arch:x64
119ea44b91a63e7b003756b47f6f6bd1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
user32
DefWindowProcW
DestroyWindow
CreateWindowExW
EndDialog
RegisterClassExW
LoadAcceleratorsW
LoadStringW
ShowWindow
DispatchMessageW
SetTimer
TranslateAcceleratorW
TranslateMessage
LoadIconW
LoadCursorW
PostQuitMessage
DialogBoxParamW
UpdateWindow
InvalidateRect
BeginPaint
GetMessageW
EndPaint
gdi32
CreateSolidBrush
Rectangle
SelectObject
DeleteObject
vcruntime140
__current_exception_context
memset
__C_specific_handler
__current_exception
__std_exception_copy
_CxxThrowException
__std_exception_destroy
_purecall
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-time-l1-1-0
_time64
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_c_exit
_exit
exit
_initterm_e
_register_thread_local_exe_atexit_callback
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_cexit
_set_app_type
_seh_filter_exe
_configure_wide_argv
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
kernel32
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
UnhandledExceptionFilter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
SetUnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetCurrentProcessId
GetModuleHandleW
RtlCaptureContext
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ