friend_game[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

friend_game.exe
Size

9.4MB
MD5

57c731ff1fed6be09cc810701cc1c5f9
SHA1

2324ff88d7596607aa0f7f03a302f3a36596674b
SHA256

462eed03dcbb106385fdf12ccbbe06a3c1f6cab90aa289dbeebf6616d160ce13
SHA512

6818e149b9e41dd7cda0a11cdd06a1aabd50d7713ad9dbfdc4fd9502436478547aaedef38bdacff4335dd05141ffcb3bb319a43bc7d49ff4749c6594b7e1ab80
SSDEEP

49152:Z6DP6qU8ij2dXs9ob/YaqmK9WLRocEJhAWktbBTO2ck4OeXHhALj2oM+peC5QHsX:v4Hc9WJ/0T3ZlG75AwuB6wArA6aOcgS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
friend_game.exe

Files

friend_game.exe
.exe windows:6 windows x64 arch:x64

9e902ca0128540f981f3605ffc5cedc4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

friend_game.pdb

Imports

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressAll
WakeByAddressSingle

user32

ToUnicodeEx
TrackMouseEvent
GetTouchInputInfo
ScreenToClient
CloseTouchInputHandle
GetCursorPos
MonitorFromRect
PeekMessageW
GetKeyboardLayout
GetKeyboardState
GetKeyState
SetWindowPos
CreateIcon
GetClientRect
SystemParametersInfoA
GetDC
InvalidateRgn
SetCursor
LoadCursorW
MapVirtualKeyA
RegisterClassExW
EnumDisplaySettingsExW
GetWindowRect
DestroyIcon
GetRawInputData
ShowCursor
ClipCursor
GetClipCursor
GetActiveWindow
ClientToScreen
AdjustWindowRectEx
GetWindowLongW
SetWindowLongW
SendMessageW
EnableMenuItem
GetSystemMenu
ShowWindow
SetForegroundWindow
SendInput
MapVirtualKeyW
DispatchMessageW
TranslateMessage
SetWindowTextW
ReleaseCapture
SetCapture
CreateWindowExW
MsgWaitForMultipleObjectsEx
SetWindowDisplayAffinity
RegisterWindowMessageA
RegisterRawInputDevices
GetSystemMetrics
GetMessageW
GetMenu
SetWindowLongPtrW
DestroyWindow
RedrawWindow
IsProcessDPIAware
ValidateRect
GetMonitorInfoW
GetWindowLongPtrW
PostThreadMessageW
DefWindowProcW
MonitorFromWindow
SetWindowPlacement
GetWindowPlacement
ChangeDisplaySettingsExW
PostMessageW
GetUpdateRect
RegisterTouchWindow

kernel32

CreateEventA
FormatMessageW
HeapAlloc
GetProcessHeap
lstrlenW
CreateMutexA
GetCurrentProcessId
LoadLibraryA
WaitForSingleObjectEx
WideCharToMultiByte
GetCurrentProcess
ReleaseMutex
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetThreadErrorMode
GetModuleFileNameW
GetConsoleMode
AddVectoredExceptionHandler
GetProcAddress
GetLastError
LoadLibraryExW
GetModuleHandleW
RemoveVectoredExceptionHandler
WaitForSingleObject
QueryPerformanceCounter
QueryPerformanceFrequency
GetCurrentThreadId
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
InitializeSListHead
CloseHandle
SetEvent
IsDebuggerPresent
LoadLibraryExA
Sleep
FreeLibrary
GetModuleHandleA
GetFullPathNameW
CreateThread
WriteConsoleW
MultiByteToWideChar
HeapFree
SetThreadPriority
WaitForMultipleObjectsEx
ExitProcess
GetFinalPathNameByHandleW
RemoveDirectoryW
SetThreadStackGuarantee
GetCurrentThread
SwitchToThread
CreateWaitableTimerExW
SetWaitableTimer
GetSystemInfo
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
DeleteFileW
SetFileInformationByHandle
DuplicateHandle
SetFilePointerEx
FindFirstFileW
CreateDirectoryW
GetFileInformationByHandleEx
GetFileInformationByHandle
CreateFileW
FindClose
FindNextFileW
HeapReAlloc
GetSystemTimePreciseAsFileTime
TerminateProcess
GetStdHandle

ole32

CoCreateInstance
CoInitializeEx
OleInitialize
CoIncrementMTAUsage
CoTaskMemFree
RegisterDragDrop
CoUninitialize
RevokeDragDrop

gdi32

DeleteObject
CreateRectRgn
GetDeviceCaps

dwmapi

DwmEnableBlurBehindWindow

d3dcompiler_47

D3DCompile

oleaut32

GetErrorInfo
SysFreeString
SysStringLen

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

shell32

SHGetKnownFolderPath
DragFinish
DragQueryFileW

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory

winmm

timeGetDevCaps
timeEndPeriod
timeBeginPeriod

imm32

ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
ImmAssociateContextEx

uxtheme

SetWindowTheme

ntdll

NtWriteFile
NtCreateFile
RtlNtStatusToDosError
NtReadFile

vcruntime140

memcpy
memset
memmove
__current_exception_context
memcmp
__current_exception
_CxxThrowException
__C_specific_handler
__CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

ceilf
exp2
floorf
trunc
cosf
fmodf
exp2f
acosf
powf
log2f
roundf
sinf
asinf
truncf
round
__setusermatherr
floor
ceil

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
malloc

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_set_app_type
_c_exit
_register_thread_local_exe_atexit_callback
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_cexit
_seh_filter_exe

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 7.0MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e902ca0128540f981f3605ffc5cedc4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

bcryptprimitives

api-ms-win-core-synch-l1-2-0

user32

kernel32

ole32

gdi32

dwmapi

d3dcompiler_47

oleaut32

bcrypt

advapi32

shell32

api-ms-win-core-winrt-l1-1-0

winmm

imm32

uxtheme

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 7.0MB - Virtual size: 7.0MB

.rdata Size: 2.1MB - Virtual size: 2.1MB

.data Size: 5KB - Virtual size: 15KB

.pdata Size: 266KB - Virtual size: 266KB

.reloc Size: 29KB - Virtual size: 29KB

.text
Size: 7.0MB - Virtual size: 7.0MB

.rdata
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 5KB - Virtual size: 15KB

.pdata
Size: 266KB - Virtual size: 266KB

.reloc
Size: 29KB - Virtual size: 29KB