F:\NewChromeGame\bin\build\Release\360Game.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fad327b21ec1c684ff8b2f9dc94df9a0ff92207a98e69caec2b8f395d71847c7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fad327b21ec1c684ff8b2f9dc94df9a0ff92207a98e69caec2b8f395d71847c7.exe
Resource
win10v2004-20240802-en
General
-
Target
fad327b21ec1c684ff8b2f9dc94df9a0ff92207a98e69caec2b8f395d71847c7
-
Size
548KB
-
MD5
8251812c7c0b90a6fa79a52b1f9ea323
-
SHA1
f4c4743caa7f0ddf53f800d99a4465c9c6a907ea
-
SHA256
fad327b21ec1c684ff8b2f9dc94df9a0ff92207a98e69caec2b8f395d71847c7
-
SHA512
d57bf022c774dccd66c5586ae4ae6af0312f93ce349e6b784d421aa804e64bb3cca7f4963c54dd2e37bf9db398a969a7dd5cefa710147def314e988a0f889741
-
SSDEEP
12288:AaacpPW+ZEaaxsGB5UXxRvid16eGDF4HOK+/hx:Na6uYgKwqifCOJ+/z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fad327b21ec1c684ff8b2f9dc94df9a0ff92207a98e69caec2b8f395d71847c7
Files
-
fad327b21ec1c684ff8b2f9dc94df9a0ff92207a98e69caec2b8f395d71847c7.exe windows:5 windows x86 arch:x86
88ebd27016b445d04e46df01ca485034
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
MoveFileExW
RemoveDirectoryW
FindFirstFileW
FindNextFileW
FindClose
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
InterlockedExchange
GetSystemDirectoryW
SetCurrentDirectoryW
WaitForSingleObject
CreateEventW
OpenEventW
MoveFileW
GetCurrentThread
CreateMutexW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetCurrentProcess
OpenProcess
Sleep
CopyFileW
GetTickCount
GetTempPathW
GetTempFileNameW
LoadLibraryExW
ExitProcess
ReleaseMutex
VirtualQuery
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
DeleteFileW
SetFileAttributesW
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
LocalFree
GetLastError
CreateProcessW
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
GetCurrentProcessId
CloseHandle
DeviceIoControl
GetWindowsDirectoryW
CreateFileW
ReadProcessMemory
WaitForMultipleObjects
IsDebuggerPresent
OutputDebugStringW
CreateFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFilePointerEx
WriteFile
ReadFile
GetFileSizeEx
FormatMessageW
MultiByteToWideChar
SetLastError
GetCurrentThreadId
GetSystemTime
TlsGetValue
TlsSetValue
HeapUnlock
OpenThread
HeapLock
HeapWalk
TlsAlloc
TlsFree
EncodePointer
CreateThread
ExitThread
GetCommandLineW
RtlUnwind
IsProcessorFeaturePresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetModuleHandleExW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetStringTypeW
GetStdHandle
GetFileType
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleW
FlushFileBuffers
ReadConsoleW
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryExA
CreateDirectoryW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
user32
MessageBoxW
shell32
SHGetFolderPathW
ShellExecuteW
shlwapi
PathIsRootW
SHGetValueW
PathAddBackslashW
PathAppendW
PathIsDirectoryW
PathFileExistsW
PathRemoveFileSpecW
advapi32
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
RegCloseKey
Sections
.text Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ