trickyracer-fix[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

trickyracer-fix.zip
Size

6.6MB
MD5

7cf3e133fe87b66647444a702bb080b3
SHA1

4b28aec9d355e99c05748fa67b85ea55604dd052
SHA256

2314aee742cc0899afa34744a13c287a2cd2d4da61a44944430a0531ad7413b6
SHA512

07003fd8f93389c9b0cebe205ffaca3ed735b06e22422f84633622a0db6b1af13f371384e924c99638758c27d8bb9339307c2856c5f60e42062c13e5467f1fb8
SSDEEP

196608:n9WYYxTcqYufRUnsU8u+PDpHuWjfuR5shqFbW:TZuJKsNjpOWjfuYhx

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/trickyracer/oggvorbiswrapper.dll
unpack001/trickyracer/race.exe

Files

trickyracer-fix.zip
.zip
trickyracer/activator.wav
trickyracer/back.wav
trickyracer/barrel0.jpg
.jpg
trickyracer/barrel2.jpg
.jpg
trickyracer/block.jpg
.jpg
trickyracer/breaksign.wav
trickyracer/brick0.jpg
.jpg
trickyracer/concrete.jpg
.jpg
trickyracer/construction.jpg
.jpg
trickyracer/crack.wav
trickyracer/demo1.rep
trickyracer/demo2.rep
trickyracer/demo3.rep
trickyracer/engine4_accelerate.wav
trickyracer/engine4_idle.wav
trickyracer/engine_accelerate.wav
trickyracer/engine_idle.wav
trickyracer/fallapart.wav
trickyracer/friction.wav
trickyracer/front.wav
trickyracer/ground0.jpg
.jpg
trickyracer/ground2.jpg
.jpg
trickyracer/head.jpg
.jpg
trickyracer/image0.dat
.jpg
trickyracer/levellist23_0.dat
trickyracer/mission_failed.wav
trickyracer/music.ogg
trickyracer/oggvorbiswrapper.dll
.dll windows:4 windows x86 arch:x86

aefa6d0375a67e45bdb2f17f246ff631

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

c:\work\android\libvorbis\oggwrapperdll\Release\oggwrapperdll.pdb

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapFree
HeapReAlloc
HeapAlloc
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetLastError
ReadFile
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
WriteFile
VirtualAlloc
LCMapStringA
MultiByteToWideChar
LCMapStringW
RaiseException
RtlUnwind
InterlockedExchange
VirtualQuery
InitializeCriticalSection
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle
CreateFileA
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
GetLocaleInfoA
VirtualProtect
GetSystemInfo
GetStringTypeA
GetStringTypeW
HeapSize
SetEndOfFile

Exports

Exports

vorbis_decode_file

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
trickyracer/parkinglot.jpg
.jpg
trickyracer/pcb.jpg
.jpg
trickyracer/pneumatcap.jpg
.jpg
trickyracer/pneumatcylinder.jpg
.jpg
trickyracer/race.exe
.exe windows:5 windows x86 arch:x86

a4fcc5f3e609e48a1f0eccccd9525dc6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\work\lanracer\ReleaseReal10\lanracer.pdb

Imports

kernel32

GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
GetSystemTimeAsFileTime
GetTickCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
CreateFileA
GetCurrentProcessId
FlushFileBuffers
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
LoadLibraryW
WaitForSingleObject
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetCurrentProcess
SetPriorityClass
CreateEventA
GetCurrentDirectoryA
SetCurrentDirectoryA
PulseEvent
GetProcAddress
QueryPerformanceCounter
CreateThread
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
Sleep
ExitProcess
SetFilePointer
ReadFile
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
CloseHandle
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
CreateFileW
UnhandledExceptionFilter
HeapSize
InterlockedDecrement
MulDiv
QueryPerformanceFrequency
GetSystemInfo
GetCurrentThreadId
SetLastError
HeapAlloc
GetLastError
HeapFree
HeapReAlloc
RtlUnwind
EncodePointer
DecodePointer
GetModuleHandleW
DeleteFileA
RaiseException
GetCommandLineA
HeapSetInformation
GetStartupInfoW
IsProcessorFeaturePresent
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement

user32

GetClientRect
MessageBoxA
GetDesktopWindow
GetAsyncKeyState
CreateWindowExA
SendMessageA
SetWindowTextA
GetWindowTextA
MoveWindow
DestroyWindow
EnableWindow
DefWindowProcA
EndPaint
BeginPaint
DispatchMessageA
TranslateMessage
PeekMessageA
SetCursor
AdjustWindowRect
ShowWindow
ReleaseDC
RegisterClassExA
SetActiveWindow
SetFocus
SetForegroundWindow
RegisterClassA
ShowCursor
LoadCursorA
GetWindowDC

gdi32

CreateSolidBrush
CreateCompatibleDC
CreateDIBSection
SetMapMode
GetDeviceCaps
CreateFontA
SelectObject
SetTextColor
SetBkColor
SetTextAlign
ExtTextOutA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA

d3d9

Direct3DCreate9

ws2_32

__WSAFDIsSet
select
listen
bind
WSAHtons
WSASocketA
setsockopt
recv
connect
socket
gethostbyname
accept
closesocket
WSAStartup
send

winmm

timeGetTime

dsound

ord11

dinput8

DirectInput8Create

oggvorbiswrapper

vorbis_decode_file

Sections

.text
Size: 565KB - Virtual size: 565KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 142.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
trickyracer/readme.txt
trickyracer/road_closed.jpg
.jpg
trickyracer/segment1.jpg
.jpg
trickyracer/segment2.jpg
.jpg
trickyracer/segment3.jpg
.jpg
trickyracer/segment4.jpg
.jpg
trickyracer/segment5.jpg
.jpg
trickyracer/segment6.jpg
.jpg
trickyracer/skid.wav
trickyracer/skybox.jpg
.jpg
trickyracer/smallwood.wav
trickyracer/stone2.jpg
.jpg
trickyracer/strongsquarrel.jpg
.jpg
trickyracer/trigger.jpg
.jpg
trickyracer/truckfart.wav
trickyracer/valley.jpg
.jpg
trickyracer/wheel.jpg
.jpg
trickyracer/wheelbreakoff.wav
trickyracer/win.wav
trickyracer/wood.jpg
.jpg
trickyracer/woodbreak.wav

Sharing

General

Malware Config

Signatures

Files

aefa6d0375a67e45bdb2f17f246ff631

Headers

File Characteristics

PDB Paths

Imports

kernel32

Exports

Exports

Sections

.text Size: 120KB - Virtual size: 116KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 8KB - Virtual size: 11KB

.reloc Size: 8KB - Virtual size: 6KB

a4fcc5f3e609e48a1f0eccccd9525dc6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

d3d9

ws2_32

winmm

dsound

dinput8

oggvorbiswrapper

Sections

.text Size: 565KB - Virtual size: 565KB

.rdata Size: 72KB - Virtual size: 71KB

.data Size: 20KB - Virtual size: 142.7MB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 169KB - Virtual size: 169KB

.text
Size: 120KB - Virtual size: 116KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 8KB - Virtual size: 11KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 565KB - Virtual size: 565KB

.rdata
Size: 72KB - Virtual size: 71KB

.data
Size: 20KB - Virtual size: 142.7MB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 169KB - Virtual size: 169KB