G:\app\product\bin\Release\Win32\gamebox.pdb
Static task
static1
Behavioral task
behavioral1
Sample
2694ee563634a0e965eedcac0e75810f2469ab28e6b9700ab707367d35900fe7.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2694ee563634a0e965eedcac0e75810f2469ab28e6b9700ab707367d35900fe7.dll
Resource
win10v2004-20240611-en
General
-
Target
2694ee563634a0e965eedcac0e75810f2469ab28e6b9700ab707367d35900fe7
-
Size
301KB
-
MD5
801550512bb67bc77a9103c8a2ae6e7f
-
SHA1
b7c51e8c931bd17deac6e75efdc88c72ebf7ca5c
-
SHA256
2694ee563634a0e965eedcac0e75810f2469ab28e6b9700ab707367d35900fe7
-
SHA512
aceaed28e3e7bfdcce213c3793bf04dac3fd5fb789e63bfbdfb5f69f7653b01ca039710c636cd08906798c8f521534fe988632e7096c8949ad6090b11147a12b
-
SSDEEP
6144:OOFMU5lrMHsk2LtXl2PFI6hj+15uVe41hbmEfLt2:OOFMUPYszLVl8JZLLmkh2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2694ee563634a0e965eedcac0e75810f2469ab28e6b9700ab707367d35900fe7
Files
-
2694ee563634a0e965eedcac0e75810f2469ab28e6b9700ab707367d35900fe7.dll windows:5 windows x86 arch:x86
e0bf82958aba54318a0b182ba67c911a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetTickCount
CopyFileW
Sleep
CloseHandle
GetLocalTime
SystemTimeToFileTime
LockResource
GetProcAddress
GlobalFree
CreateFileW
SizeofResource
WriteFile
GetModuleHandleW
GetSystemWindowsDirectoryW
SetFilePointerEx
InterlockedDecrement
GetLastError
GlobalAlloc
InterlockedIncrement
LoadResource
FindResourceW
SetEndOfFile
FreeResource
DeviceIoControl
GetNativeSystemInfo
ReadConsoleW
ReadFile
WriteConsoleW
SetStdHandle
HeapSize
HeapReAlloc
GetStringTypeW
RtlUnwind
HeapFree
HeapAlloc
EncodePointer
DecodePointer
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
GetProcessHeap
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetModuleFileNameW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
RaiseException
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetFileType
DeleteCriticalSection
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
OutputDebugStringW
GetConsoleCP
GetConsoleMode
LCMapStringW
FlushFileBuffers
advapi32
CloseServiceHandle
RegQueryValueExW
RegSetValueExW
RegCloseKey
OpenSCManagerW
CreateServiceW
OpenServiceW
RegOpenKeyExW
QueryServiceStatus
StartServiceW
iphlpapi
GetAdaptersInfo
crypt32
CertOpenStore
CertAddCertificateContextToStore
CertCloseStore
CertFreeCertificateContext
CertCreateCertificateContext
CryptStringToBinaryA
ws2_32
WSACleanup
closesocket
htons
socket
WSAStartup
WSAGetLastError
sendto
Exports
Exports
GetUdApiDrvInfo
GetUdApiDrvInst
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ