Static task
static1
Behavioral task
behavioral1
Sample
Euro Truck Simulator 2 v1.16.x.x - v1.48.x.x Plus +15 Trainer.exe
Resource
win10v2004-20240802-en
General
-
Target
euro_truck_simulator_2_v116xx_v148xx_plus_15_trainer.zip
-
Size
776KB
-
MD5
8d34165e6f840d07de3447aaccd98a98
-
SHA1
03cc320d6321961be9a8e8277a709905651f166c
-
SHA256
aaebd00506cd24d0e1e7e1e19b0174bb5837382cc71e89a47e2d9bcca6b37960
-
SHA512
8fe4a129deb3fafebde9bc69b72730dbd974eb1b0ad86fe35f2af3ec5c52bde239a3be90364e11abaf13cb9541cb07c3d217a56a723fdba633b32fc7d63a67bb
-
SSDEEP
12288:bY/FlzS6nMC3y2r7LRkn99SCB0MZBloJR9dy9u0r48KRGfjabgoMmLM:bQFl6KRknF0olqsH08KQzmw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Euro Truck Simulator 2 v1.16.x.x - v1.48.x.x Plus +15 Trainer.exe
Files
-
euro_truck_simulator_2_v116xx_v148xx_plus_15_trainer.zip.zip
Password: trainer
-
Euro Truck Simulator 2 v1.16.x.x - v1.48.x.x Plus +15 Trainer.exe.exe windows:5 windows x64 arch:x64
Password: trainer
15006372021a18ee31abab31a337ae86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
VirtualAllocEx
VirtualFreeEx
VirtualProtectEx
VirtualQueryEx
SetProcessWorkingSetSize
OpenProcess
GetCurrentProcessId
ReadProcessMemory
WriteProcessMemory
Sleep
CloseHandle
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
LocalFree
ole32
CoInitializeEx
oleaut32
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
msvcp110
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Getcoll
_Strcoll
_Strxfrm
??0_Locinfo@std@@QEAA@PEBD@Z
??1_Locinfo@std@@QEAA@XZ
??Bid@locale@std@@QEAA_KXZ
??0facet@locale@std@@IEAA@_K@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
?tolower@?$ctype@D@std@@QEBADD@Z
?tolower@?$ctype@D@std@@QEBAPEBDPEADPEBD@Z
?_Getcat@?$ctype@D@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Syserror_map@std@@YAPEBDH@Z
?_Winerror_map@std@@YAPEBDH@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
_Xtime_get_ticks
??0_Pad@std@@QEAA@XZ
??1_Pad@std@@QEAA@XZ
?_Launch@_Pad@std@@QEAAXPEAU_Thrd_imp_t@@@Z
?_Release@_Pad@std@@QEAAXXZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??_7_Facet_base@std@@6B@
??_7facet@locale@std@@6B@
?id@?$ctype@D@std@@2V0locale@2@A
?id@?$collate@D@std@@2V0locale@2@A
?_Xbad_alloc@std@@YAXXZ
??1_Lockit@std@@QEAA@XZ
??0_Lockit@std@@QEAA@H@Z
mscoree
CLRCreateInstance
msvcr110
??2@YAPEAX_K@Z
??3@YAXPEAX@Z
strtol
free
realloc
memmove
strchr
_purecall
??0bad_cast@std@@QEAA@PEBD@Z
??0bad_cast@std@@QEAA@AEBV01@@Z
??0exception@std@@QEAA@AEBV01@@Z
??1bad_cast@std@@UEAA@XZ
_CxxThrowException
__CxxFrameHandler3
memcmp
memcpy
memset
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__wgetmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_wcmdln
_fmode
_commode
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCapturePreviousContext
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
__crtSetUnhandledExceptionFilter
?terminate@@YAXXZ
Exports
Exports
Sections
biumy Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
cjvnzq Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
dktox Size: 1005KB - Virtual size: 1006KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ahslwp Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
egrfy Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
cjunzq Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ