Static task
static1
General
-
Target
game.exe
-
Size
98.4MB
-
MD5
49ee02a1f35543414a5b0673089a2124
-
SHA1
a06aa086d25dc7c368e65bdaac6a515a3cc4469c
-
SHA256
38167efc0f1011ee15000445325f8305b7127659226a75c1d3ce7e3caa381d15
-
SHA512
3adb4421d47f4a714b602480cf9558b864c5cebbdf37082a739433ff68a686ce4a5be97ebdbca62c08f823cd1948cb87c70543398b2b1fb7a161050b3a1e197b
-
SSDEEP
1572864:2Bbeix22KvQVcKnZ/yqzathLHB3mM6n6O3iDrxoapx4D4b6ezYnQ48:2BbXEDFKduthLh3o6O3iHx1ERnQ48
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource game.exe
Files
-
game.exe.exe windows:5 windows x86 arch:x86
faac987cca0c4b64dfdd5177ceabbd32
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
Sleep
FindClose
CloseHandle
GetModuleFileNameW
CreateProcessW
GetCommandLineW
GetTempPathW
GetTempFileNameW
SetCurrentDirectoryW
CreateDirectoryW
RemoveDirectoryW
FindFirstFileW
FindNextFileW
CreateFileW
GetLastError
ReadFile
WriteFile
SetFilePointer
WideCharToMultiByte
MultiByteToWideChar
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LoadLibraryW
OutputDebugStringW
LoadLibraryExW
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
DeleteFileW
SetEnvironmentVariableW
GetCurrentDirectoryW
GetCommandLineA
HeapAlloc
EncodePointer
DecodePointer
RtlUnwind
HeapCompact
HeapReAlloc
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
DeleteCriticalSection
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
RaiseException
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
LCMapStringW
WriteConsoleW
user32
LoadStringW
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
wsprintfW
Sections
.text Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 292KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ