Euro Truck Simulator 2 v1[.]16[.]x[.]x - v1[.]50[.]x[.]x Plus +15 Trainer[.]exe

Resubmissions

08/06/2024, 09:22

240608-lb1dmsaf7t7

08/06/2024, 09:14

240608-k7e7xaaf6v7

Sharing

Copy URL Twitter E-mail

General

Target
Euro Truck Simulator 2 v1.16.x.x - v1.50.x.x Plus +15 Trainer.exe
Size 1.4MB
Sample240608-k7e7xaaf6v
SHA256 a9381acdda22cc627242244cebe8a4a68ed2c43d9da804271efd62ed8bb2a0f1
MD5 703ca81af310fdf04680883b03f4e42a
SHA1 c3aa4e6392eeecdcf4b11d9bde47f4bb63adfb64
SHA512 3f759996fc1f5e1665a6af59153a0d85b30a5db5618cc2b8a2287ce46b2722a85f36e19cfa85d45d5dcb801de6558d02b8da6a9ae42506049f4013994a6da9e7
SSDEEP 24576:RQ9zseTy/mdQlq6JXF5u5S3raYQKr3XDMhzPX31J6g85wHQvzzwdasvOO:RQ9z2mdQlJXF5KyraTKrDM1P6g855AIm
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Euro Truck Simulator 2 v1.16.x.x - v1.50.x.x Plus +15 Trainer.exe

File Explorer

Euro Truck Simulator 2 v1.16.x.x - v1.50.x.x Plus +15 Trainer.exe

.exe 1.4MB

Euro Truck Simulator 2 v1.16.x.x - v1.50.x.x Plus +15 Trainer.exe

IMPHASH 15006372021a18ee31abab31a337ae86
SHA256 a9381acdda22cc627242244cebe8a4a68ed2c43d9da804271efd62ed8bb2a0f1
MD5 703ca81af310fdf04680883b03f4e42a
SHA1 c3aa4e6392eeecdcf4b11d9bde47f4bb63adfb64
SHA512 3f759996fc1f5e1665a6af59153a0d85b30a5db5618cc2b8a2287ce46b2722a85f36e19cfa85d45d5dcb801de6558d02b8da6a9ae42506049f4013994a6da9e7
SSDEEP 24576:RQ9zseTy/mdQlq6JXF5u5S3raYQKr3XDMhzPX31J6g85wHQvzzwdasvOO:RQ9z2mdQlJXF5KyraTKrDM1P6g855AIm
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

67756

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

VirtualAllocEx VirtualFreeEx VirtualProtectEx VirtualQueryEx SetProcessWorkingSetSize OpenProcess GetCurrentProcessId ReadProcessMemory WriteProcessMemory Sleep CloseHandle GetSystemTimeAsFileTime GetCurrentThreadId QueryPerformanceCounter IsProcessorFeaturePresent IsDebuggerPresent DecodePointer EncodePointer LocalFree

ole32

CoInitializeEx

oleaut32

SafeArrayCreateVector SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreate

msvcp110

?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z _Getcoll _Strcoll _Strxfrm ??0_Locinfo@std@@QEAA@PEBD@Z ??1_Locinfo@std@@QEAA@XZ ??Bid@locale@std@@QEAA_KXZ ??0facet@locale@std@@IEAA@_K@Z ?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?tolower@?$ctype@D@std@@QEBADD@Z ?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z ?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Winerror_map@std@@YAPEBDH@Z ?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z _Xtime_get_ticks ??0_Pad@std@@QEAA@XZ ??1_Pad@std@@QEAA@XZ ?_Launch@_Pad@std@@QEAAXPEAU_Thrd_imp_t@@@Z ?_Release@_Pad@std@@QEAAXXZ ?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ ?_Incref@facet@locale@std@@UEAAXXZ ??_7_Facet_base@std@@6B@ ??_7facet@locale@std@@6B@ ?id@?$ctype@D@std@@2V0locale@2@A ?id@?$collate@D@std@@2V0locale@2@A ?_Xbad_alloc@std@@YAXXZ ??1_Lockit@std@@QEAA@XZ ??0_Lockit@std@@QEAA@H@Z

mscoree

CLRCreateInstance

msvcr110

??2@YAPEAX_K@Z ??3@YAXPEAX@Z strtol free realloc memmove strchr _purecall ??0bad_cast@std@@QEAA@PEBD@Z ??0bad_cast@std@@QEAA@AEBV01@@Z ??0exception@std@@QEAA@AEBV01@@Z ??1bad_cast@std@@UEAA@XZ _CxxThrowException __CxxFrameHandler3 memcmp memcpy memset _lock _unlock _calloc_crt __dllonexit __C_specific_handler _onexit _XcptFilter __crtGetShowWindowMode _amsg_exit __wgetmainargs __set_app_type exit _exit _cexit _configthreadlocale __setusermatherr _initterm_e _initterm _wcmdln _fmode _commode __crt_debugger_hook __crtUnhandledException __crtTerminateProcess __crtCapturePreviousContext ?_type_info_dtor_internal_method@type_info@@QEAAXXZ __crtSetUnhandledExceptionFilter ?terminate@@YAXXZ