9970c1d525d18737e3d5b90c1e14e3a7451cf4876a8f0b5279cfe5ae96ca2ca6

Sharing

Copy URL Twitter E-mail

General

Target

9970c1d525d18737e3d5b90c1e14e3a7451cf4876a8f0b5279cfe5ae96ca2ca6
Size

829KB
MD5

226515a160a145a3b8c314968f7884ca
SHA1

233e6d77ed602761c289fda2b0dabc0b2ec07a8d
SHA256

9970c1d525d18737e3d5b90c1e14e3a7451cf4876a8f0b5279cfe5ae96ca2ca6
SHA512

157d3abc58d7adcc218fe198ad50347310ed660980e7100abfc958395da8f3cd01c5ed45189a8cf5f71003d786ef2d94c77e2115ca6140670dbb8db8add29252
SSDEEP

12288:LwR+nPkPuoLv46qtPxINtDsbam1k2+LLEqMEEI:i+nPkPuoVqZxINxKn1E3EqMRI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9970c1d525d18737e3d5b90c1e14e3a7451cf4876a8f0b5279cfe5ae96ca2ca6

Files

9970c1d525d18737e3d5b90c1e14e3a7451cf4876a8f0b5279cfe5ae96ca2ca6
.exe windows:6 windows x64 arch:x64

21466b9350c2075937e6d90d6e062813

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\assemblage_aaai_code\Builds\19054413574456992gvuhyffmhy\raygame\assemblage_outdir_bin\raygame.pdb

Imports

kernel32

LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
SetThreadExecutionState
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
InitializeCriticalSection
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
VerifyVersionInfoW
LoadLibraryA
FormatMessageW
GetProcAddress
GetModuleHandleW
FreeLibrary
GetLastError
VerSetConditionMask
QueryPerformanceFrequency
SetUnhandledExceptionFilter
QueryPerformanceCounter
RtlCaptureContext

user32

AdjustWindowRectEx
SetCursorPos
SetCursor
GetCursorPos
ClipCursor
ClientToScreen
ScreenToClient
SetWindowPos
SetRect
PtInRect
GetWindowLongW
SetWindowLongW
GetClassLongPtrW
LoadCursorW
DestroyIcon
LoadImageW
CreateIconIndirect
CopyIcon
GetWindowRect
GetRawInputData
RegisterRawInputDevices
GetRawInputDeviceInfoA
GetRawInputDeviceList
RedrawWindow
MoveWindow
FlashWindow
SetLayeredWindowAttributes
GetLayeredWindowAttributes
RegisterClassExW
UnregisterClassW
DefWindowProcW
WaitMessage
PostMessageW
SendMessageW
GetMessageTime
TrackMouseEvent
EnumDisplayMonitors
GetMonitorInfoW
GetClientRect
SetWindowTextW
RemovePropW
SetPropW
GetPropW
SetForegroundWindow
GetSystemMetrics
MsgWaitForMultipleObjects
ReleaseCapture
SetCapture
GetAsyncKeyState
GetKeyState
GetActiveWindow
SetFocus
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
IsZoomed
BringWindowToTop
IsIconic
MonitorFromWindow
IsWindowVisible
EnumDisplayDevicesW
TranslateMessage
DispatchMessageW
PeekMessageW
RegisterDeviceNotificationW
UnregisterDeviceNotification
CreateWindowExW
DestroyWindow
ShowWindow
ToUnicode
MapVirtualKeyW
SystemParametersInfoW
GetDC
ReleaseDC
ChangeDisplaySettingsExW
EnumDisplaySettingsW
EnumDisplaySettingsExW
WindowFromPoint

gdi32

CreateDCW
GetDeviceCaps
GetDeviceGammaRamp
SetDeviceGammaRamp
CreateBitmap
CreateRectRgn
DeleteObject
CreateDIBSection
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
DeleteDC

shell32

DragFinish
DragQueryPoint
DragQueryFileW
DragAcceptFiles

msvcp140

?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Xlength_error@std@@YAXPEBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
?good@ios_base@std@@QEBA_NXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler_noexcept
__current_exception_context
__current_exception
_CxxThrowException
__C_specific_handler
memmove
__vcrt_GetModuleFileNameW
strstr
strrchr
memset
memcpy
__std_exception_copy
__std_exception_destroy
memcmp
__vcrt_LoadLibraryExW

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
exit
_wassert
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_exit
_get_initial_narrow_environment
_initterm
_initterm_e

api-ms-win-crt-utility-l1-1-0

rand
qsort
srand
abs

api-ms-win-crt-math-l1-1-0

fminf
asinf
atan2f
tan
sqrt
fmaxf
round
acos
log
fabs
copysignf
atan2
floor
__setusermatherr
fmodf
cos
fmod
pow
ceil
ceilf
logf
powf
sqrtf
_hypotf
ldexp
frexp
cosf
sinf
fmax
fmin
hypot

api-ms-win-crt-stdio-l1-1-0

_set_fmode
ftell
fwrite
__acrt_iob_func
rewind
fgets
__stdio_common_vsscanf
__p__commode
fread
fputs
__stdio_common_vfprintf
__stdio_common_vsprintf
fopen_s
feof
_getcwd
fclose
fopen
fputc
fseek

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
realloc
malloc
calloc
free

api-ms-win-crt-string-l1-1-0

strcat_s
strncpy
strncmp
strlen
strcpy
tolower
strcpy_s
strcspn
strncat
strspn
wcscmp
wcscpy
strcmp
strcat

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-filesystem-l1-1-0

_chdir

api-ms-win-crt-convert-l1-1-0

strtod
strtoul
strtol

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 503KB - Virtual size: 503KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21466b9350c2075937e6d90d6e062813

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 503KB - Virtual size: 503KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 212KB - Virtual size: 232KB

.pdata Size: 16KB - Virtual size: 16KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 503KB - Virtual size: 503KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 212KB - Virtual size: 232KB

.pdata
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB