7ee6c35eded56f7d02309a4a04fba383bc1ee965d46c57d06113884e3d345484

Sharing

Copy URL Twitter E-mail

General

Target

7ee6c35eded56f7d02309a4a04fba383bc1ee965d46c57d06113884e3d345484
Size

814KB
MD5

b5ea6f91fe65d9e2cdca6c81c11ba652
SHA1

8df4e7684c4ce9345cec93a8d9239f1b7bbff6cb
SHA256

7ee6c35eded56f7d02309a4a04fba383bc1ee965d46c57d06113884e3d345484
SHA512

f3c79bae56c93fe286fb6a4ea38387c62402b16593f8ae2443990dc64ddc4d6bf391915ea42c4fdb0b23809c70f8e9fdc5a67259e346edebf5bf2dd1c258fee0
SSDEEP

12288:CSlNPEnPkb4Zmc4+ZkcwWWe6ZZbP3UaMWEK:CSlpEnPkb4UyZkcbz6PbUaMHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7ee6c35eded56f7d02309a4a04fba383bc1ee965d46c57d06113884e3d345484

Files

7ee6c35eded56f7d02309a4a04fba383bc1ee965d46c57d06113884e3d345484
.exe windows:6 windows x64 arch:x64

21466b9350c2075937e6d90d6e062813

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\assemblage_aaai_code\Builds\7128559209536377516zsfgtywhlw\raygame\assemblage_outdir_bin\raygame.pdb

Imports

kernel32

LeaveCriticalSection
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
SetThreadExecutionState
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
InitializeCriticalSection
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
VerifyVersionInfoW
LoadLibraryA
FormatMessageW
GetProcAddress
GetModuleHandleW
FreeLibrary
GetLastError
VerSetConditionMask
QueryPerformanceFrequency
SetUnhandledExceptionFilter
QueryPerformanceCounter
RtlCaptureContext

user32

AdjustWindowRectEx
SetCursorPos
SetCursor
GetCursorPos
ClipCursor
ClientToScreen
ScreenToClient
SetWindowPos
SetRect
PtInRect
GetWindowLongW
SetWindowLongW
GetClassLongPtrW
LoadCursorW
DestroyIcon
LoadImageW
CreateIconIndirect
CopyIcon
GetWindowRect
GetRawInputData
RegisterRawInputDevices
GetRawInputDeviceInfoA
GetRawInputDeviceList
RedrawWindow
MoveWindow
FlashWindow
SetLayeredWindowAttributes
GetLayeredWindowAttributes
RegisterClassExW
UnregisterClassW
DefWindowProcW
WaitMessage
PostMessageW
SendMessageW
GetMessageTime
TrackMouseEvent
EnumDisplayMonitors
GetMonitorInfoW
GetClientRect
SetWindowTextW
RemovePropW
SetPropW
GetPropW
SetForegroundWindow
GetSystemMetrics
MsgWaitForMultipleObjects
ReleaseCapture
SetCapture
GetAsyncKeyState
GetKeyState
GetActiveWindow
SetFocus
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
IsZoomed
BringWindowToTop
IsIconic
MonitorFromWindow
IsWindowVisible
EnumDisplayDevicesW
TranslateMessage
DispatchMessageW
PeekMessageW
RegisterDeviceNotificationW
UnregisterDeviceNotification
CreateWindowExW
DestroyWindow
ShowWindow
ToUnicode
MapVirtualKeyW
SystemParametersInfoW
GetDC
ReleaseDC
ChangeDisplaySettingsExW
EnumDisplaySettingsW
EnumDisplaySettingsExW
WindowFromPoint

gdi32

CreateDCW
GetDeviceCaps
GetDeviceGammaRamp
SetDeviceGammaRamp
CreateBitmap
CreateRectRgn
DeleteObject
CreateDIBSection
ChoosePixelFormat
DescribePixelFormat
SetPixelFormat
SwapBuffers
DeleteDC

shell32

DragFinish
DragQueryPoint
DragQueryFileW
DragAcceptFiles

msvcp140

?flags@ios_base@std@@QEBAHXZ
?width@ios_base@std@@QEBA_JXZ
?width@ios_base@std@@QEAA_J_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBAPEAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?_Xlength_error@std@@YAXPEBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
?good@ios_base@std@@QEBA_NXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler_noexcept
__current_exception_context
__current_exception
_CxxThrowException
__C_specific_handler
memmove
__vcrt_GetModuleFileNameW
strstr
strrchr
memset
memcpy
__std_exception_copy
__std_exception_destroy
memcmp
__vcrt_LoadLibraryExW

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
terminate
_register_thread_local_exe_atexit_callback
_c_exit
__p___argv
__p___argc
exit
_wassert
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
_exit
_get_initial_narrow_environment
_initterm
_initterm_e

api-ms-win-crt-utility-l1-1-0

rand
qsort
srand
abs

api-ms-win-crt-math-l1-1-0

fminf
asinf
atan2f
tan
sqrt
fmaxf
round
acos
log
fabs
copysignf
atan2
floor
__setusermatherr
fmodf
cos
fmod
pow
ceil
ceilf
logf
powf
sqrtf
_hypotf
ldexp
frexp
cosf
sinf
fmax
fmin
hypot

api-ms-win-crt-stdio-l1-1-0

_set_fmode
ftell
fwrite
__acrt_iob_func
rewind
fgets
__stdio_common_vsscanf
__p__commode
fread
fputs
__stdio_common_vfprintf
__stdio_common_vsprintf
fopen_s
feof
_getcwd
fclose
fopen
fputc
fseek

api-ms-win-crt-heap-l1-1-0

_set_new_mode
_callnewh
realloc
malloc
calloc
free

api-ms-win-crt-string-l1-1-0

strcat_s
strncpy
strncmp
strlen
strcpy
tolower
strcpy_s
strcspn
strncat
strspn
wcscmp
wcscpy
strcmp
strcat

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-filesystem-l1-1-0

_chdir

api-ms-win-crt-convert-l1-1-0

strtod
strtoul
strtol

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 489KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 212KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21466b9350c2075937e6d90d6e062813

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 489KB - Virtual size: 488KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 212KB - Virtual size: 232KB

.pdata Size: 15KB - Virtual size: 15KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 489KB - Virtual size: 488KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 212KB - Virtual size: 232KB

.pdata
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 3KB - Virtual size: 3KB