PlantsVsZombies[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

PlantsVsZombies.exe
Size

3.4MB
MD5

3a43ed77a7edda448a394df2ffa61fd5
SHA1

35834487a64dca887cdcb33909eb430e8e9c444b
SHA256

1ff5a2dcf009b453b8866783a68e8d04bd0d066abda3f8196d75a677366b2dff
SHA512

d193c2da233526171d5596fc45705d99111c2409ccca2e769fc2bc6eaca78fc94fa4ba291fad45a702cd9077d976348d877fc6092346881e9200a38729500664
SSDEEP

98304:8aXTlsc2LPJ/9Cyq9JuSjUu941QD3cMriEI:8aac2LPJ1Cyq9JuSjUuu1Qjcgif

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PlantsVsZombies.exe

Files

PlantsVsZombies.exe
.exe windows:5 windows x86 arch:x86

c1d9c77b7a5eed8862f5372a2f716bca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\dfranzi\Desktop\Files\Perforce\dfranzi_SEA-10786\games\Lawn\goty\cpp\Lawn\ReleaseFinal\PlantsVsZombies.pdb

Imports

kernel32

OutputDebugStringA
GetModuleFileNameA
WinExec
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
GetProcessHeap
SetEndOfFile
SetEnvironmentVariableA
CreateFileW
GetLocaleInfoW
FreeLibrary
InterlockedDecrement
GetProcAddress
LoadLibraryA
CreateFileA
LeaveCriticalSection
MulDiv
FileTimeToSystemTime
GetSystemDirectoryA
EnterCriticalSection
GetFileTime
CloseHandle
GlobalLock
WaitForSingleObject
GetCurrentThread
GetCommandLineA
GlobalAlloc
Sleep
MultiByteToWideChar
SetThreadPriority
GlobalUnlock
FindFirstFileA
GetLastError
GlobalFree
FindClose
FindNextFileA
CreateMutexA
GetCurrentThreadId
GetVersionExA
DeleteFileA
UnmapViewOfFile
VirtualQuery
SetErrorMode
SetUnhandledExceptionFilter
GetCurrentProcess
InitializeCriticalSection
IsBadWritePtr
GetThreadPriority
DeleteCriticalSection
OpenFileMappingA
CreateThread
InterlockedIncrement
LoadLibraryW
GetCurrentDirectoryW
GetWindowsDirectoryA
SetEvent
CreateEventA
GetFileSize
FindResourceA
LoadResource
SizeofResource
LockResource
WideCharToMultiByte
InterlockedCompareExchange
InterlockedExchange
GetLocaleInfoA
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetModuleHandleW
ExitProcess
GetStartupInfoA
HeapFree
ExitThread
ResumeThread
GetLocalTime
CreateDirectoryA
GetDriveTypeA
GetFullPathNameA
HeapReAlloc
HeapAlloc
RtlUnwind
RaiseException
GetCPInfo
LCMapStringA
LCMapStringW
GetTimeFormatA
GetDateFormatA
CompareStringA
CompareStringW
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetACP
GetOEMCP
IsValidCodePage
ReadFile
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
InitializeCriticalSectionAndSpinCount
HeapSize
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
VirtualFree
VirtualAlloc
FlushFileBuffers
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RemoveDirectoryA

user32

HideCaret
MoveWindow
GetSystemMetrics
AdjustWindowRectEx
ReleaseDC
OffsetRect
GetDC
DrawTextExA
GetClientRect
GetWindowInfo
FillRect
ClientToScreen
RegisterClassA
DefWindowProcW
ChangeDisplaySettingsA
DialogBoxIndirectParamA
AdjustWindowRect
SetClipboardData
SetWindowTextA
IsWindowVisible
ReleaseCapture
SystemParametersInfoA
MessageBoxW
OpenClipboard
DispatchMessageA
PostMessageA
ShowWindow
GetCursorPos
DestroyCursor
DefWindowProcA
EndDialog
GetDlgItem
ShowCaret
PeekMessageA
CreateWindowExA
GetClipboardData
GetWindowLongA
InvalidateRect
SetWindowLongA
GetWindowTextA
GetWindowPlacement
TranslateMessage
EnumWindows
BeginPaint
RegisterWindowMessageA
SetFocus
WindowFromPoint
IsWindowEnabled
EnumDisplaySettingsA
LoadIconA
CreateCursor
SetForegroundWindow
SetCapture
IsIconic
SetActiveWindow
GetWindowRect
ScreenToClient
SetTimer
CloseClipboard
DestroyWindow
EndPaint
CreateWindowExW
GetSysColorBrush
GetSysColor
GetDesktopWindow
IsDialogMessageA
GetFocus
DrawTextA
GetMessageA
IsWindow
PostThreadMessageA
DestroyCaret
CreateCaret
SetCaretPos
EmptyClipboard
LoadCursorA
MessageBoxA
SendMessageA
SetCursor
GetActiveWindow

wininet

HttpQueryInfoA
InternetReadFile
HttpOpenRequestA
HttpSendRequestA
InternetOpenA
InternetCloseHandle
InternetConnectA

winmm

timeGetTime
timeBeginPeriod
mixerOpen
mixerGetLineControlsA
mixerGetLineInfoA
mixerClose
PlaySoundA
timeEndPeriod
mixerGetControlDetailsA
mixerSetControlDetails
mixerGetDevCapsA

wsock32

send
gethostbyname
closesocket
__WSAFDIsSet
socket
inet_ntoa
connect
WSAStartup
recv
WSACleanup
htons
WSAGetLastError
select
ioctlsocket

gdi32

CreateCompatibleDC
SetBkMode
GetTextMetricsA
IntersectClipRect
GetObjectA
GetStockObject
TextOutA
DeleteObject
SelectObject
CreateSolidBrush
GetTextExtentPoint32A
SetTextColor
DeleteDC
CreateDIBSection
CreateFontA
GetDeviceCaps
CreateFontIndirectA

advapi32

RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA

shell32

ShellExecuteA

ole32

CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocString
VariantClear

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c1d9c77b7a5eed8862f5372a2f716bca

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

wininet

winmm

wsock32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 288KB - Virtual size: 292KB

.data Size: 58KB - Virtual size: 796KB

.rsrc Size: 217KB - Virtual size: 216KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 288KB - Virtual size: 292KB

.data
Size: 58KB - Virtual size: 796KB

.rsrc
Size: 217KB - Virtual size: 216KB