Big Adventure\Big City Adventure 12 Rome\BigCityAdventureRome[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Big Adventure\Big City Adventure 12 Rome\BigCityAdventureRome.exe
Size

4.5MB
MD5

9ef2eacd1f8cb0e7a23462e75e9fe456
SHA1

b6f7504fb947f43f3b50da4cadd21ea61a827fb4
SHA256

4f396eaa34f8875718b7dad3134cf49cbea64e93e10d5d13196e37281d8e4564
SHA512

df11bac07cc9a18b77390b18815ba023008b653d05291855c4c2eac978d5d99cba35893e7a000d3cee3c48f8f45d0f015904d6e0e822eeec854fd6fcf1b23761
SSDEEP

98304:gHneO94q68ROTFOGJVupOPtQALnoM2mD:gHeO94P8RiFOL0d2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Big Adventure\Big City Adventure 12 Rome\BigCityAdventureRome.exe

Files

Big Adventure\Big City Adventure 12 Rome\BigCityAdventureRome.exe
.exe windows:4 windows x86 arch:x86

Password: infected

cf75350f39eea5618653533e35a8f5c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\_CCode\BCARome\BigCityAdventureRome.pdb

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

bass

BASS_ChannelGetLength
BASS_ChannelIsActive
BASS_ChannelIsSliding
BASS_ChannelPause
BASS_ChannelPlay
BASS_ChannelRemoveSync
BASS_ChannelSeconds2Bytes
BASS_ChannelSetAttributes
BASS_ChannelSetPosition
BASS_ChannelSetSync
BASS_ChannelSlideAttributes
BASS_ChannelStop
BASS_Free
BASS_Init
BASS_SampleFree
BASS_SampleGetChannel
BASS_SampleLoad
BASS_SampleStop
BASS_StreamCreateFile
BASS_StreamFree

gdi32

AddFontMemResourceEx
CreateCompatibleDC
CreateFontIndirectA
DeleteDC
DeleteObject
GetDeviceCaps
GetGlyphIndicesA
GetGlyphOutline
GetStockObject
GetTextMetricsA
RemoveFontMemResourceEx
SelectObject

kernel32

CloseHandle
CompareStringA
CompareStringW
CreateDirectoryA
CreateFileA
CreateMutexA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindNextFileA
FindResourceA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetNumberFormatA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadResource
LocalFree
LockResource
MulDiv
MultiByteToWideChar
OutputDebugStringA
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetEnvironmentVariableA
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrcat
lstrcmp
lstrcmpi
lstrcpy
lstrcpyn
lstrlen

shell32

ShellExecuteA

user32

CallWindowProcA
ChangeDisplaySettingsA
ClientToScreen
CloseClipboard
CopyRect
CreateWindowExA
DefDlgProcA
DefWindowProcA
DestroyWindow
DialogBoxIndirectParamA
DispatchMessageA
EmptyClipboard
EndDialog
EnumThreadWindows
EqualRect
FillRect
FindWindowA
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetKeyState
GetMessageA
GetSystemMetrics
GetWindowLongA
GetWindowRect
InflateRect
IntersectRect
IsCharAlphaNumericA
IsIconic
KillTimer
LoadCursorA
LoadIconA
LoadImageA
LoadStringA
MessageBeep
MessageBoxA
OffsetRect
OpenClipboard
PeekMessageA
PostQuitMessage
PtInRect
RegisterClassA
ReleaseCapture
ReleaseDC
ScreenToClient
SendDlgItemMessageA
SetCapture
SetClipboardData
SetCursor
SetDlgItemTextA
SetForegroundWindow
SetRect
SetTimer
SetWindowLongA
ShowWindow
SystemParametersInfoA
TranslateMessage
UnionRect
UpdateWindow
WindowFromPoint
wvsprintfA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

timeGetTime

Sections

.text
Size: 912KB - Virtual size: 912KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 736KB - Virtual size: 736KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: 768KB - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Geddon
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: infected

cf75350f39eea5618653533e35a8f5c5

Headers

File Characteristics

PDB Paths

Imports

advapi32

bass

gdi32

kernel32

shell32

user32

version

winmm

Sections

.text Size: 912KB - Virtual size: 912KB

.rdata Size: 152KB - Virtual size: 152KB

.data Size: 736KB - Virtual size: 736KB

.text1 Size: 768KB - Virtual size: 768KB

.adata Size: 64KB - Virtual size: 64KB

.data1 Size: 256KB - Virtual size: 256KB

.pdata Size: 1.4MB - Virtual size: 1.4MB

.rsrc Size: 308KB - Virtual size: 308KB

.Geddon Size: 8KB - Virtual size: 8KB

.text
Size: 912KB - Virtual size: 912KB

.rdata
Size: 152KB - Virtual size: 152KB

.data
Size: 736KB - Virtual size: 736KB

.text1
Size: 768KB - Virtual size: 768KB

.adata
Size: 64KB - Virtual size: 64KB

.data1
Size: 256KB - Virtual size: 256KB

.pdata
Size: 1.4MB - Virtual size: 1.4MB

.rsrc
Size: 308KB - Virtual size: 308KB

.Geddon
Size: 8KB - Virtual size: 8KB