Overview
overview
3Static
static
3SimCityC/CHOICE.exe
windows10-2004-x64
3SimCityC/CHOICE.exe
windows11-21h2-x64
3SimCityC/INFO.exe
windows10-2004-x64
SimCityC/INFO.exe
windows11-21h2-x64
SimCityC/SETTINGS.exe
windows10-2004-x64
SimCityC/SETTINGS.exe
windows11-21h2-x64
SimCityC/SIMCITY.exe
windows10-2004-x64
SimCityC/SIMCITY.exe
windows11-21h2-x64
SimCityC/VRF_ADV.exe
windows10-2004-x64
SimCityC/VRF_ADV.exe
windows11-21h2-x64
SimCityC/f...FO.exe
windows10-2004-x64
SimCityC/f...FO.exe
windows11-21h2-x64
SimCityC/f...LL.exe
windows10-2004-x64
SimCityC/f...LL.exe
windows11-21h2-x64
SimCityC/pick.bat
windows10-2004-x64
3SimCityC/pick.bat
windows11-21h2-x64
3Static task
static1
Behavioral task
behavioral1
Sample
SimCityC/CHOICE.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral2
Sample
SimCityC/CHOICE.exe
Resource
win11-20240802-en
Behavioral task
behavioral3
Sample
SimCityC/INFO.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
SimCityC/INFO.exe
Resource
win11-20240802-en
Behavioral task
behavioral5
Sample
SimCityC/SETTINGS.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral6
Sample
SimCityC/SETTINGS.exe
Resource
win11-20240802-en
Behavioral task
behavioral7
Sample
SimCityC/SIMCITY.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral8
Sample
SimCityC/SIMCITY.exe
Resource
win11-20240802-en
Behavioral task
behavioral9
Sample
SimCityC/VRF_ADV.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral10
Sample
SimCityC/VRF_ADV.exe
Resource
win11-20240802-en
Behavioral task
behavioral11
Sample
SimCityC/floppy/INFO.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral12
Sample
SimCityC/floppy/INFO.exe
Resource
win11-20240802-en
Behavioral task
behavioral13
Sample
SimCityC/floppy/INSTALL.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral14
Sample
SimCityC/floppy/INSTALL.exe
Resource
win11-20240802-en
Behavioral task
behavioral15
Sample
SimCityC/pick.bat
Resource
win10v2004-20240802-en
Behavioral task
behavioral16
Sample
SimCityC/pick.bat
Resource
win11-20240802-en
General
-
Target
SimCity_Classic_1994.zip
-
Size
5.7MB
-
MD5
a4af6130b74f43f4eb96dd03f0bca3eb
-
SHA1
bb07ddd64176f7b6ddcab6c29edc5023c6da2369
-
SHA256
fe618cc766cc937212e2db33c368b150e4a6ab80dbd70e415fcfeb3d65e382a9
-
SHA512
8f4bf778213321a69d3644702bdf77cc35292e72c45da557a1b84e9d9725f29999517c5e220b8338468892d39de3681a44daf10795e4c1c2ae10462ecc62881a
-
SSDEEP
98304:DrxiOZORQg11p9ViVjxxm1SLbhvSf2i7Ziqq4lTORGUy4ojJvBSlfCg3DooMGIg2:DrkO8p9ViVjxxm1ebhvq2XqzbRxjBBQm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SimCityC/CHOICE.EXE
Files
-
SimCity_Classic_1994.zip.zip
-
SimCityC/CEGA/ASIACEGA.PGF
-
SimCityC/CEGA/CEGADAT.PGF
-
SimCityC/CEGA/CEGANTRO.PPF
-
SimCityC/CEGA/CEGASCEN.PPF
-
SimCityC/CEGA/CEGATBAR.PGF
-
SimCityC/CEGA/CEGATE.PPF
-
SimCityC/CEGA/CVGANTRO.PPF
-
SimCityC/CEGA/FEURCEGA.PGF
-
SimCityC/CEGA/FUSACEGA.PGF
-
SimCityC/CEGA/MEDICEGA.PGF
-
SimCityC/CEGA/MOONCEGA.PGF
-
SimCityC/CEGA/WESTCEGA.PGF
-
SimCityC/CHOICE.EXE.exe windows:4 windows x86 arch:x86
7778a16b79032e1872dcec133df3391e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CharUpperA
wsprintfA
CharUpperBuffA
kernel32
TlsSetValue
TlsAlloc
ExitProcess
GetCommandLineA
lstrlenA
lstrcatA
WriteFile
Beep
ReadFile
WaitForSingleObject
FlushConsoleInputBuffer
SetConsoleMode
GetConsoleMode
lstrcpyA
CreateFileA
GetStdHandle
GetVersion
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetCurrentThreadId
LoadLibraryA
SetLastError
TlsGetValue
GetLastError
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress
GetStringTypeA
GetStringTypeW
SetFilePointer
FlushFileBuffers
SetStdHandle
CloseHandle
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
LCMapStringW
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
SimCityC/CLASSIC.CFG
-
SimCityC/DATA/ADLIB.ADV
-
SimCityC/DATA/ADLIBG.ADV
-
SimCityC/DATA/ALGDIG.ADV
-
SimCityC/DATA/ARIADIG.ADV
-
SimCityC/DATA/ARIAXMID.ADV
-
SimCityC/DATA/ASIA_MSG.PTF
-
SimCityC/DATA/BULLLOOP.VOC
-
SimCityC/DATA/COPTER.VOC
-
SimCityC/DATA/EXPLODE.VOC
-
SimCityC/DATA/FEUR_MSG.PTF
-
SimCityC/DATA/FUSA_MSG.PTF
-
SimCityC/DATA/GMT32MPU.ADV
-
SimCityC/DATA/HONK.VOC
-
SimCityC/DATA/MANGO.VOC
-
SimCityC/DATA/MEDI_MSG.PTF
-
SimCityC/DATA/MESSAGE.PTF
-
SimCityC/DATA/MOON_MSG.PTF
-
SimCityC/DATA/MT32MPU.ADV
-
SimCityC/DATA/PASDIG.ADV
-
SimCityC/DATA/PASFM.ADV
-
SimCityC/DATA/PASOPL.ADV
-
SimCityC/DATA/PCSPKR.ADV
-
SimCityC/DATA/PLOP.VOC
-
SimCityC/DATA/POLICE.VOC
-
SimCityC/DATA/SBDIG.ADV
-
SimCityC/DATA/SBFM.ADV
-
SimCityC/DATA/SBP1FM.ADV
-
SimCityC/DATA/SBP2FM.ADV
-
SimCityC/DATA/SBPDIG.ADV
-
SimCityC/DATA/SCTUNE.XMI
-
SimCityC/DATA/SIMTIMBR.AD
-
SimCityC/DATA/SIMTIMBR.OPL
-
SimCityC/DATA/SOUNDDAT.PSF
-
SimCityC/DATA/TANDY.ADV
-
SimCityC/DATA/TOOTIT.VOC
-
SimCityC/DATA/WEST_MSG.PTF
-
SimCityC/GM1.BNK
-
SimCityC/GM2.BNK
-
SimCityC/INFO.EXE
-
SimCityC/INSTALL.MXS
-
SimCityC/MAXIS.CIM
-
SimCityC/MCGA/ASIAMCGA.PGF
-
SimCityC/MCGA/FEURMCGA.PGF
-
SimCityC/MCGA/FUSAMCGA.PGF
-
SimCityC/MCGA/MCGADAT.PGF
-
SimCityC/MCGA/MCGANTRO.PPF
-
SimCityC/MCGA/MCGASCEN.PPF
-
SimCityC/MCGA/MCGATBAR.PGF
-
SimCityC/MCGA/MEDIMCGA.PGF
-
SimCityC/MCGA/MOONMCGA.PGF
-
SimCityC/MCGA/WESTMCGA.PGF
-
SimCityC/MONO/ASIAMONO.PGF
-
SimCityC/MONO/FEURMONO.PGF
-
SimCityC/MONO/FUSAMONO.PGF
-
SimCityC/MONO/MEDIMONO.PGF
-
SimCityC/MONO/MONODAT.PGF
-
SimCityC/MONO/MONONTRO.PPF
-
SimCityC/MONO/MONOSCEN.PPF
-
SimCityC/MONO/MONOTBAR.PGF
-
SimCityC/MONO/MOONMONO.PGF
-
SimCityC/MONO/WESTMONO.PGF
-
SimCityC/POSTCARD.CIM
-
SimCityC/README.TXT
-
SimCityC/README_G.TXT
-
SimCityC/SCENARIO/BERN.PSN
-
SimCityC/SCENARIO/BOSTON.PSN
-
SimCityC/SCENARIO/DETROIT.PSN
-
SimCityC/SCENARIO/DULLSVIL.PSN
-
SimCityC/SCENARIO/HAMBURG.PSN
-
SimCityC/SCENARIO/RIO.PSN
-
SimCityC/SCENARIO/SANFRAN.PSN
-
SimCityC/SCENARIO/TOKYO.PSN
-
SimCityC/SETTINGS.EXE
-
SimCityC/SIMCITY.CFG
-
SimCityC/SIMCITY.EXE
-
SimCityC/VRF_ADV.EXE
-
SimCityC/floppy/2sccg_35a.IMA
-
SimCityC/floppy/2sccg_35b.IMA
-
SimCityC/floppy/ASIACEGA.PGF
-
SimCityC/floppy/ASIAMCGA.PGF
-
SimCityC/floppy/ASIAMONO.PGF
-
SimCityC/floppy/ASIA_MSG.PTF
-
SimCityC/floppy/CEGA._
-
SimCityC/floppy/DATA._
-
SimCityC/floppy/FEURCEGA.PGF
-
SimCityC/floppy/FEURMCGA.PGF
-
SimCityC/floppy/FEURMONO.PGF
-
SimCityC/floppy/FEUR_MSG.PTF
-
SimCityC/floppy/FUSACEGA.PGF
-
SimCityC/floppy/FUSAMCGA.PGF
-
SimCityC/floppy/FUSAMONO.PGF
-
SimCityC/floppy/FUSA_MSG.PTF
-
SimCityC/floppy/INFO.EXE
-
SimCityC/floppy/INSTALL.EXE
-
SimCityC/floppy/INSTALL.MXS
-
SimCityC/floppy/INSTALL._
-
SimCityC/floppy/MAXIS.CIM
-
SimCityC/floppy/MCGA._
-
SimCityC/floppy/MEDICEGA.PGF
-
SimCityC/floppy/MEDIMCGA.PGF
-
SimCityC/floppy/MEDIMONO.PGF
-
SimCityC/floppy/MEDI_MSG.PTF
-
SimCityC/floppy/MONO._
-
SimCityC/floppy/MOONCEGA.PGF
-
SimCityC/floppy/MOONMCGA.PGF
-
SimCityC/floppy/MOONMONO.PGF
-
SimCityC/floppy/MOON_MSG.PTF
-
SimCityC/floppy/POSTCARD.CIM
-
SimCityC/floppy/README.TXT
-
SimCityC/floppy/README_G.TXT
-
SimCityC/floppy/SCENARIO._
-
SimCityC/floppy/SIMCITY._
-
SimCityC/floppy/WESTCEGA.PGF
-
SimCityC/floppy/WESTMCGA.PGF
-
SimCityC/floppy/WESTMONO.PGF
-
SimCityC/floppy/WEST_MSG.PTF
-
SimCityC/floppy/simcityc_dos_35a.IMA
-
SimCityC/floppy/simcityc_dos_35b.IMA
-
SimCityC/pick.bat.bat .vbs