DeadIsland[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

DeadIsland.exe
Size

1.3MB
MD5

c769b57eb28b9b06f83e406eec63057d
SHA1

709540570c86447742707401b9088a000cfabe59
SHA256

b535fafd7f90cd45d2b74eded28a4bbf07e0ee04cab40799261aacf4e9fa402f
SHA512

d15b1ca0e657ceb3e1e48a1fec6f9738516fcd8bc7f6fbf1392f73774bfc92223d9f3b0f233fca3c45d00966450428fddc0b91e272e14e9c3fcfdda6d9519206
SSDEEP

24576:Q9dZkn+IsmF82Vgeg5ukYsYhpT26/9aqA6OkYDQyNDOzrFOe0lp2eFqS:Sk+Ismf6Zu1p39aqA6O5Qwzeic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DeadIsland.exe

Files

DeadIsland.exe
.exe windows:6 windows x64 arch:x64

b6fdc5ea8a18f0beaf3d1f520561f1f1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

EOSBootstrapper-Win64-Shipping.pdb

Imports

ws2_32

send
recv
listen
WSAGetLastError
bind
connect
ntohl
gethostname
sendto
recvfrom
WSAEventSelect
WSAEnumNetworkEvents
WSACreateEvent
WSACloseEvent
freeaddrinfo
getaddrinfo
select
__WSAFDIsSet
ioctlsocket
closesocket
htonl
accept
WSACleanup
WSAStartup
WSAIoctl
WSASetLastError
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername

kernel32

ExitProcess
FreeLibraryAndExitThread
ExitThread
ExpandEnvironmentStringsW
OutputDebugStringW
GetModuleHandleW
GetCommandLineW
GetStdHandle
SetEnvironmentVariableW
CreateFileW
GetFileSize
IsDebuggerPresent
CloseHandle
GetLastError
WaitForSingleObject
GetCurrentProcess
GetExitCodeProcess
ResumeThread
CreateProcessA
GetSystemInfo
GetVersionExW
GetNativeSystemInfo
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
CreateJobObjectW
VirtualAlloc
SetInformationJobObject
QueryInformationJobObject
FreeLibrary
GetModuleFileNameA
GetModuleHandleExW
GetProcAddress
LoadLibraryExW
LoadResource
LockResource
SizeofResource
WriteFile
FindResourceW
EnumResourceNamesW
LocalFree
FormatMessageW
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
GetConsoleScreenBufferInfo
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
SleepEx
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
QueryPerformanceCounter
GetTickCount
Sleep
MultiByteToWideChar
WideCharToMultiByte
MoveFileExA
WaitForSingleObjectEx
GetEnvironmentVariableA
GetFileType
ReadFile
PeekNamedPipe
WaitForMultipleObjects
VerSetConditionMask
VerifyVersionInfoA
CreateFileA
GetFileSizeEx
TlsAlloc
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
HeapFree
HeapAlloc
HeapReAlloc
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
CreateThread
FileTimeToSystemTime
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
SetStdHandle
RtlUnwind
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
DeleteFileW
HeapSize
WriteConsoleW
EnumResourceLanguagesExW
RtlUnwindEx
RaiseException
RtlPcToFileHeader
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateEventW
ResetEvent
SystemTimeToTzSpecificLocalTime
SetEvent
InitializeCriticalSectionAndSpinCount
GetLocaleInfoEx
GetDriveTypeW
TlsFree
TlsSetValue
FormatMessageA
GetStringTypeW
GetCurrentDirectoryW
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
GetFullPathNameW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
TlsGetValue

advapi32

RegCloseKey
RegQueryValueExW
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
RegOpenKeyExW

ole32

CoCreateGuid

crypt32

CertOpenStore
CertFindCertificateInStore
CertEnumCertificatesInStore
CryptStringToBinaryA
PFXImportCertStore
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertFreeCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CertCloseStore
CertFreeCertificateContext

wldap32

ord30
ord79
ord35
ord33
ord32
ord27
ord200
ord22
ord41
ord50
ord45
ord60
ord211
ord46
ord217
ord143
ord301
ord26

normaliz

IdnToAscii

imagehlp

ImageRemoveCertificate
ImageEnumerateCertificates

Sections

.text
Size: 956KB - Virtual size: 955KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 221KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b6fdc5ea8a18f0beaf3d1f520561f1f1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ws2_32

kernel32

advapi32

ole32

crypt32

wldap32

normaliz

imagehlp

Sections

.text Size: 956KB - Virtual size: 955KB

.rdata Size: 221KB - Virtual size: 221KB

.data Size: 8KB - Virtual size: 16KB

.pdata Size: 39KB - Virtual size: 38KB

_RDATA Size: 512B - Virtual size: 244B

.rsrc Size: 70KB - Virtual size: 69KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 956KB - Virtual size: 955KB

.rdata
Size: 221KB - Virtual size: 221KB

.data
Size: 8KB - Virtual size: 16KB

.pdata
Size: 39KB - Virtual size: 38KB

_RDATA
Size: 512B - Virtual size: 244B

.rsrc
Size: 70KB - Virtual size: 69KB

.reloc
Size: 5KB - Virtual size: 5KB