zylom[.]games[.]universal[.]patcher[.]v1[.]1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

zylom.games.universal.patcher.v1.1.exe
Size

59KB
MD5

6cb6ce0fa31b000618994660403f3a66
SHA1

e4d597fe3a2d438077fd6d8fe65e26920107b3ce
SHA256

4c84567015627ea9dceca6fbcc838070d9e87f5a31ae555ccc46f26ca47f074a
SHA512

2617c5616ad62b3a419259866a08644be7934fd8dc13bf9882408b4c3285326fa72e95a37c42da5f4482b79079ec99f1e0b8462d065508f73daff73f17cad0df
SSDEEP

768:rNpPZQReyBpVblHpS9Kaoji5o6keJncciyTBzg:7PZQReyBXlyFSPJeJccR1g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
zylom.games.universal.patcher.v1.1.exe

Files

zylom.games.universal.patcher.v1.1.exe
.exe windows:4 windows x86 arch:x86

b58904afc650f017a57cf4d94e4d6567

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
LoadIconA
SendMessageA
SetDlgItemTextA
SetWindowTextA
DialogBoxParamA

kernel32

ResumeThread
ExitThread
CloseHandle
CreateFileA
CreateFileMappingA
ExitProcess
FindResourceA
GetModuleHandleA
GetTickCount
GlobalAlloc
GlobalFree
LoadResource
LockResource
MapViewOfFile
SizeofResource
UnmapViewOfFile
Sleep
SetThreadPriority
GetFileSize
SuspendThread
CreateThread

shell32

ShellExecuteA

comctl32

InitCommonControls

comdlg32

GetOpenFileNameA

winmm

waveOutWrite
waveOutClose
waveOutUnprepareHeader
waveOutRestart
waveOutReset
waveOutPrepareHeader
waveOutPause
waveOutOpen
waveOutGetPosition

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ