PSN Liberator[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

PSN Liberator.exe
Size

314KB
MD5

d5108e5bc400ca4945d17bc6b54531de
SHA1

f9f09477ef557535fec05c2bf560054f3be3e235
SHA256

c3f7df6b9fec2cc68474e248f46147e5393e77caef01ae965ca031f2330ff275
SHA512

ec6a8a090edeeb7e4cd7413df3e6b9dc716c6ef771feff81166570ffd68f49817f067a7f783faf2d591cc7e3bfc29a6cd3f2fe3a3a32ea71c8180e5a30aad511
SSDEEP

6144:7HasoY37Ah1/mMtTBeXs63wDWKBO8FyQ3iQzYRZz52QnBfQrWd0QPrOC4iDeYJ:7HasoYrAb/ntVZ63waKD3DzYRBB+Wd8r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PSN Liberator.exe

Files

PSN Liberator.exe
.exe windows:4 windows x86 arch:x86

2cee413f4804542ba2d4236592ae5cd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
memmove
_strnicmp
strncmp
strncpy
_strdup
free
strstr
_isnan
sprintf
_stricmp
strlen
strcpy
strcat
longjmp
_setjmp3
fseek
ftell
fread
strcmp
memcmp
localtime
mktime
gmtime
sqrt
abs
fabs
ceil
malloc
floor
fclose
exit
__p__iob
fprintf
getenv
sscanf
fmod
sin
cos

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
GetDiskFreeSpaceExA
GetDriveTypeA
GetVolumeInformationA
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
CreateThread
TerminateThread
HeapAlloc
HeapFree
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessA
PeekNamedPipe
TerminateProcess
ReadFile
MulDiv
GetCurrentDirectoryA
FindFirstFileA
FindClose
GetFileAttributesA
DeleteFileA
CreateDirectoryA
SetFileAttributesA
CopyFileA
FindNextFileA
GetLastError
MoveFileA
WriteFile
CreateFileA
SetFilePointer
GetFileSize
HeapReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GlobalSize
SetLastError
GetLocalTime
TlsAlloc
TlsSetValue
TlsGetValue
GetVersionExA
WideCharToMultiByte
DeleteCriticalSection
TlsFree
WaitForMultipleObjects
GetCurrentThread
CreateSemaphoreA
ReleaseSemaphore
MultiByteToWideChar

user32

SendMessageA
CharLowerA
CharUpperA
MessageBoxA
EnableWindow
DefWindowProcA
DestroyWindow
GetWindowLongA
GetWindowTextLengthA
GetWindowTextA
UnregisterClassA
LoadCursorA
RegisterClassExA
IsWindowEnabled
GetSystemMetrics
CreateWindowExA
SetWindowLongA
SetFocus
CreateAcceleratorTableA
SetForegroundWindow
BringWindowToTop
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
DestroyAcceleratorTable
PostMessageA
GetWindowThreadProcessId
IsWindowVisible
GetForegroundWindow
EnumWindows
SetWindowPos
SetMenu
DestroyMenu
EnableMenuItem
GetPropA
GetMenu
CallWindowProcA
CreateMenu
SetPropA
AppendMenuA
RedrawWindow
GetClientRect
GetDC
DrawFocusRect
ReleaseDC
ScreenToClient
RemovePropA
GetParent
GetClassNameA
GetWindowRect
IntersectRect
EnumChildWindows
SetWindowTextA
ClientToScreen
MapWindowPoints
MoveWindow
InvalidateRect
GetSysColor
GetSysColorBrush
GetWindow
GetIconInfo
UpdateWindow
ReleaseCapture
BeginPaint
DrawStateA
EndPaint
SetCapture
FillRect
DrawFrameControl
SetActiveWindow
LoadIconA
PeekMessageA
MsgWaitForMultipleObjects
GetActiveWindow
IsZoomed
IsIconic
ShowWindow
GetCursorPos
RegisterClassA
AdjustWindowRectEx
GetFocus
IsChild
GetKeyState
DefFrameProcA
SetCursorPos
LoadImageA
SetCursor
SystemParametersInfoA
RegisterWindowMessageA
DestroyIcon
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx

gdi32

GetStockObject
DeleteObject
CreateDCA
GetDeviceCaps
CreateFontA
DeleteDC
SetBkColor
SetTextColor
GetObjectType
GetObjectA
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
StretchBlt
CreatePen
MoveToEx
LineTo
CreateDIBSection
CreateSolidBrush
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
SelectClipRgn
SetDIBits
SetStretchBltMode
SetBrushOrgEx
BitBlt
GdiSetBatchLimit
GdiGetBatchLimit
GetDIBits
CreateBitmap
SetPixel
GetTextExtentPoint32A
SetBkMode
SetTextAlign
TextOutA
GetPixel
CreateFontIndirectA
GetTextMetricsA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

comctl32

InitCommonControlsEx
ImageList_Destroy
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_Add
ImageList_ReplaceIcon
ImageList_GetIconSize

ole32

CoInitialize
CoTaskMemFree
OleInitialize
OleUninitialize
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
DoDragDrop

shell32

ShellExecuteExA
DragQueryFileA

winmm

timeBeginPeriod
timeEndPeriod

shlwapi

PathMatchSpecA

Sections

.code
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 198KB - Virtual size: 198KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2cee413f4804542ba2d4236592ae5cd4

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

comctl32

ole32

shell32

winmm

shlwapi

Sections

.code Size: 76KB - Virtual size: 76KB

.text Size: 198KB - Virtual size: 198KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 23KB - Virtual size: 25KB

.rsrc Size: 5KB - Virtual size: 4KB

.code
Size: 76KB - Virtual size: 76KB

.text
Size: 198KB - Virtual size: 198KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 23KB - Virtual size: 25KB

.rsrc
Size: 5KB - Virtual size: 4KB