de1a08ff5be4f9e86c6e4bb3df02e2a18c854004305f352c5b92989f8e8e24b4

Sharing

Copy URL Twitter E-mail

General

Target

de1a08ff5be4f9e86c6e4bb3df02e2a18c854004305f352c5b92989f8e8e24b4
Size

13.4MB
MD5

778c17cb20c2d6e08af0846ac7fa11b6
SHA1

88d9b39caf1906270a8510c9a10475fe5d104c3a
SHA256

de1a08ff5be4f9e86c6e4bb3df02e2a18c854004305f352c5b92989f8e8e24b4
SHA512

07f5424007a472c62f7286f79b0dd7c6cbe2dd60539cfaa0f2a457039afef210d75d7881bc3ac461e1ee27a3ae54b1da6902d6e7e17cf2aee4165d912c725322
SSDEEP

98304:hTVu+u3/BEKdAf2mrNh1ZLjkGJAmjYZPmh6RD:h5S3xAf1rNh1ZsGJAm0Pmh0D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de1a08ff5be4f9e86c6e4bb3df02e2a18c854004305f352c5b92989f8e8e24b4

Files

de1a08ff5be4f9e86c6e4bb3df02e2a18c854004305f352c5b92989f8e8e24b4
.exe windows:5 windows x86 arch:x86

c55b30f4c44ff012708b0fb6b9e4b502

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\jenkins\workspace\KB-Darkside\os\win32\kbsrc\build\game\KBDarkside.pdb

Imports

version

VerQueryValueW

d3dx9_43

D3DXMatrixTranspose
D3DXMatrixMultiply
D3DXMatrixInverse
D3DXPlaneIntersectLine
D3DXVec4Transform
D3DXVec3TransformCoord
D3DXLoadSurfaceFromFileInMemory
D3DXMatrixRotationY
D3DXGetImageInfoFromFileInMemory
D3DXMatrixLookAtLH
D3DXSaveSurfaceToFileInMemory
D3DXVec3Normalize
D3DXLoadSurfaceFromSurface
D3DXMatrixRotationYawPitchRoll
D3DXPlaneTransform
D3DXMatrixOrthoOffCenterLH
D3DXQuaternionSlerp
D3DXQuaternionRotationMatrix
D3DXMatrixRotationQuaternion
D3DXMatrixRotationX
D3DXMatrixRotationZ
D3DXFilterTexture
D3DXMatrixTransformation
D3DXPlaneFromPointNormal
D3DXQuaternionSquad
D3DXQuaternionSquadSetup
D3DXMatrixPerspectiveFovLH
D3DXMatrixOrthoLH
D3DXQuaternionNormalize
D3DXQuaternionRotationAxis
D3DXPlaneFromPoints
D3DXComputeBoundingSphere
D3DXMatrixRotationAxis
D3DXMatrixDeterminant
D3DXLoadSurfaceFromMemory
D3DXCreateVolumeTextureFromFileInMemory
D3DXCreateVolumeTexture
D3DXCreateCubeTextureFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx

winmm

timeBeginPeriod
timeGetTime
timeEndPeriod

shlwapi

PathIsRelativeA
SHDeleteKeyA
SHDeleteValueA
PathCombineA
PathRemoveFileSpecW

steam_api

SteamApps
SteamRemoteStorage
SteamUserStats
SteamAPI_RegisterCallResult
SteamAPI_UnregisterCallResult
SteamUser
SteamAPI_Init
SteamAPI_RestartAppIfNecessary
SteamAPI_Shutdown
SteamAPI_RunCallbacks

libcef

cef_string_list_copy
cef_string_multimap_append
cef_string_multimap_value
cef_string_multimap_key
cef_string_multimap_size
cef_string_map_append
cef_string_map_value
cef_string_map_key
cef_string_map_size
cef_string_list_append
cef_string_list_value
cef_string_map_alloc
cef_string_map_free
cef_parse_url
cef_string_list_size
cef_web_urlrequest_create
cef_string_utf16_clear
cef_string_utf8_to_utf16
cef_browser_create
cef_string_list_alloc
cef_build_revision
cef_string_utf16_set
cef_string_list_free
cef_string_utf16_cmp
cef_do_message_loop_work
cef_shutdown
cef_initialize
cef_post_data_element_create
cef_post_data_create
cef_request_create
cef_string_multimap_free
cef_string_multimap_alloc
cef_string_userfree_utf16_free

windowscodecs

WICConvertBitmapSource

kernel32

TerminateProcess
CreateProcessW
FreeResource
LocalAlloc
LocalFree
GetUserDefaultLangID
CompareStringA
FindClose
GetCommandLineA
GetEnvironmentVariableA
CreateDirectoryA
FindFirstFileA
GetFileSize
ReadFile
CreateFileW
DeleteFileA
InterlockedIncrement
InterlockedDecrement
RemoveDirectoryW
GetFileAttributesW
DeleteFileW
FreeLibrary
GetProcAddress
LoadLibraryA
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
GlobalMemoryStatusEx
GetSystemInfo
WriteFile
CreateFileA
Beep
GetLocalTime
GetTickCount
GetModuleFileNameA
QueryPerformanceCounter
QueryPerformanceFrequency
CompareStringW
RtlCaptureContext
SetUnhandledExceptionFilter
ReleaseSemaphore
WaitForSingleObject
GetProcessId
VirtualQueryEx
CreateSemaphoreW
LoadLibraryW
GetLastError
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
SetEvent
ResetEvent
WaitForMultipleObjects
IsValidLocale
GetLocaleInfoW
LCMapStringW
GetTimeFormatW
GetDateFormatW
FindFirstFileExW
FileTimeToLocalFileTime
VirtualQuery
GetCurrentProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetProcessHeap
SystemTimeToTzSpecificLocalTime
GetConsoleCP
GetFileType
ReadConsoleW
GetConsoleMode
GetModuleHandleW
GetStartupInfoW
CloseHandle
TlsSetValue
TlsGetValue
TlsAlloc
UnhandledExceptionFilter
GetStringTypeW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
HeapSize
GetTempPathA
RtlUnwind
LoadLibraryExW
ExitThread
HeapReAlloc
HeapAlloc
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
RaiseException
FindFirstFileExA
GetSystemTimeAsFileTime
AreFileApisANSI
GetModuleHandleExW
DecodePointer
EncodePointer
MulDiv
FindResourceA
WriteFileEx
WaitForSingleObjectEx
SleepEx
FormatMessageA
CreateThread
GetCurrentDirectoryA
SetCurrentDirectoryA
FindResourceW
SizeofResource
LoadResource
Sleep
DeleteCriticalSection
InitializeCriticalSection
SetThreadAffinityMask
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
GetSystemTime
LeaveCriticalSection
EnterCriticalSection
GetUserDefaultLCID
SetLastError
ReadDirectoryChangesW
GetFileAttributesA
CreateEventA
GetOverlappedResult
WriteConsoleW
SetConsoleTitleA
FreeConsole
EnumSystemLocalesW
SetStdHandle
Thread32First
Thread32Next
GetFileInformationByHandle
PeekNamedPipe
SetEnvironmentVariableA
CreateProcessA
GetSystemDefaultLangID
GetComputerNameW
OutputDebugStringW
GetCommandLineW
GetModuleFileNameW
ExitProcess
GetProcessAffinityMask
VirtualFree
VirtualAlloc
SetLocalTime
GetLogicalDrives
SystemTimeToFileTime
FileTimeToSystemTime
AllocConsole
SetConsoleCtrlHandler
SetConsoleMode
GetNumberOfConsoleInputEvents
ReadConsoleInputW
GetStdHandle
GetFileTime
CompareFileTime
FindNextFileA
GetFullPathNameW
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
GetVersion
OutputDebugStringA
WideCharToMultiByte
GetExitCodeProcess
SetFilePointerEx
FlushFileBuffers
FindNextFileW
FindFirstFileW
MoveFileW
MoveFileExW
GetFileAttributesExW
lstrlenA
TlsFree
GetTimeZoneInformation
CreateDirectoryW
GetDiskFreeSpaceW
GetDriveTypeW
SetFileTime
SetFilePointer
GetTempPathW
GetCurrentDirectoryW
SetFileAttributesW
CopyFileW
DeviceIoControl
SetEndOfFile

user32

GetMenu
GetSystemMetrics
ReleaseCapture
SetCapture
GetKeyboardLayout
CreateIconFromResource
GetCursor
IsClipboardFormatAvailable
GetClipboardData
GetParent
GetFocus
GetActiveWindow
CharLowerBuffW
CharLowerBuffA
CharUpperBuffA
SetCursorPos
SetRect
RegisterDeviceNotificationW
CreateWindowExW
RegisterClassExW
UnregisterClassW
RegisterClassW
DefWindowProcW
MapWindowPoints
ScreenToClient
TranslateMessage
DispatchMessageW
PeekMessageW
PostMessageW
DefWindowProcA
PostQuitMessage
RegisterClassA
CreateWindowExA
DestroyWindow
ShowWindow
AdjustWindowRectEx
ClientToScreen
UpdateLayeredWindow
SetFocus
SetTimer
KillTimer
UpdateWindow
GetDC
ReleaseDC
GetClientRect
MessageBoxA
MessageBoxW
FillRect
GetWindowLongW
SetWindowLongW
EmptyClipboard
LoadCursorW
LoadIconW
IsDialogMessageW
MonitorFromPoint
GetMonitorInfoW
CallWindowProcW
EnumDisplaySettingsW
EnumDisplayDevicesW
ShowCursor
SetCursor
ClipCursor
DestroyCursor
CreateIconFromResourceEx
GetAsyncKeyState
SystemParametersInfoW
GetKeyState
GetCursorPos
GetWindowRect
GetDoubleClickTime
MoveWindow
SetWindowPos
OpenClipboard
SetClipboardData
GetMessageW
SetClassLongW
SetWindowTextW
CloseClipboard

gdi32

CreateFontIndirectW
GetTextExtentExPointW
SetBkColor
SetMapMode
SetDeviceGammaRamp
CreateDCW
RemoveFontMemResourceEx
AddFontMemResourceEx
CreateFontIndirectA
GetTextMetricsW
TextOutW
CreateSolidBrush
SetTextColor
SetBkMode
GetDeviceCaps
GetObjectW
CreateDIBSection
SelectObject
GetStockObject
DeleteObject
DeleteDC
CreateCompatibleDC
SetViewportExtEx
SetWindowExtEx

advapi32

RegEnumKeyExA
RegCreateKeyExA
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumValueA
RegSetValueExA

shell32

SHGetFolderPathA
SHGetFolderPathW
SHCreateDirectoryExW

ole32

CoSetProxyBlanket
CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal
CoUninitialize

avifil32

AVIStreamRelease
AVIFileCreateStreamA
AVIStreamInfoW
AVIStreamSetFormat
AVIStreamWrite
AVIFileGetStream
AVIFileInfoW
AVIFileOpenA
AVIFileRelease
AVIFileExit
AVIFileInit
AVIStreamLength
AVIStreamGetFrameOpen
AVIStreamGetFrame
AVIStreamGetFrameClose

msvfw32

ICDecompress
ICCompress
ICGetInfo
ICLocate
ICSendMessage

d3d9

Direct3DCreate9

dsound

ord11

dinput8

DirectInput8Create

comctl32

InitCommonControlsEx

openal32

alSourcePlay
alSourceStop
alSourcePause
alGenBuffers
alDeleteBuffers
alBufferData
alGetSourcei
alSource3i
alListenerfv
alListener3f
alListenerf
alGetProcAddress
alGetError
alGetSourcef
alSourcei
alSource3f
alSourcef
alDeleteSources
alGenSources
alcGetIntegerv
alcGetString
alcIsExtensionPresent
alcCloseDevice
alcOpenDevice
alcDestroyContext
alcMakeContextCurrent
alcCreateContext
alDistanceModel

oleaut32

SysAllocString
VariantClear
SysFreeString

Sections

.codex!!
Size: 4.6MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.codex!!
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.codex!!
Size: 781KB - Virtual size: 13.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.codex!!
Size: 277KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.codex!!
Size: 285KB - Virtual size: 920KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c55b30f4c44ff012708b0fb6b9e4b502

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

d3dx9_43

winmm

shlwapi

steam_api

libcef

windowscodecs

kernel32

user32

gdi32

advapi32

shell32

ole32

avifil32

msvfw32

d3d9

dsound

dinput8

comctl32

openal32

oleaut32

Sections

.codex!! Size: 4.6MB - Virtual size: 4.6MB

.codex!! Size: 7.4MB - Virtual size: 7.4MB

.codex!! Size: 781KB - Virtual size: 13.1MB

.codex!! Size: 277KB - Virtual size: 280KB

.codex!! Size: 285KB - Virtual size: 920KB

.codex!!
Size: 4.6MB - Virtual size: 4.6MB

.codex!!
Size: 7.4MB - Virtual size: 7.4MB

.codex!!
Size: 781KB - Virtual size: 13.1MB

.codex!!
Size: 277KB - Virtual size: 280KB

.codex!!
Size: 285KB - Virtual size: 920KB