Plants Vs Zombies Hybrid English v2[.]5 v1[.]3[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Plants Vs Zombies Hybrid English v2.5 v1.3.zip
Size

215.4MB
MD5

102fb10710ad3c046c77ed560176bcfe
SHA1

cd86dca2e43d381faa87ae9d636cc97ce10e051e
SHA256

fffe464e115b8b04d5718f4a7b27b95dd9e6c3d8875f9a808f6668dccb52598a
SHA512

626a325fcaec6223ee113c525902a47093549c3fec4a39260f3dd494a199a2fb573e8cb294feeeb3632db88f154485afacfdf55737abb14939ccf92e7c22e4d6
SSDEEP

6291456:LHEcjVa+N5/nGwf/MzD69EyKrRfmfPg5WsSqm:LkmhN5ewf46K8Y5Ws8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Plants Vs Zombies Hybrid English v2.5 v1.3/PlantsVsZombies Hybrid English v2.5.exe

Files

Plants Vs Zombies Hybrid English v2.5 v1.3.zip
.zip
Plants Vs Zombies Hybrid English v2.5 v1.3/PlantsVsZombies Hybrid English v2.5.exe
.exe windows:5 windows x86 arch:x86

baae94c249ba146bfd59fa89a7d865f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pvzhe_launcher.pdb

Imports

kernel32

GetProcessTimes
GetCurrentProcess
GetCurrentProcessId
TerminateProcess
SwitchToThread
CreateThread
GetCurrentThreadId
IsProcessorFeaturePresent
GlobalMemoryStatusEx
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemDirectoryW
VirtualAlloc
VirtualProtect
VirtualQuery
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryW
LocalFree
GetConsoleOutputCP
HeapSize
SetStdHandle
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetCommandLineA
GetModuleHandleExW
WriteFile
TlsFree
TlsSetValue
TlsAlloc
DeleteCriticalSection
CompareStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringW
RtlUnwind
GetStartupInfoW
SetUnhandledExceptionFilter
CreateMutexA
WaitForSingleObjectEx
WaitForSingleObject
ReleaseMutex
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapReAlloc
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
CreateWaitableTimerW
Sleep
SetWaitableTimer
GetModuleHandleA
GetFullPathNameW
WriteConsoleW
CreateProcessW
GetWindowsDirectoryW
CreateNamedPipeW
ExitProcess
GetModuleHandleW
GetFileType
GetConsoleMode
CopyFileExW
HeapAlloc
SetLastError
GetLastError
RaiseException
DuplicateHandle
AreFileApisANSI
TlsGetValue
DeleteFileW
CreateDirectoryW
GetFileInformationByHandle
FindClose
FindNextFileW
lstrlenW
LoadLibraryA
QueryPerformanceFrequency
WriteFileEx
GetStdHandle
SleepEx
ReadFileEx
SetFilePointerEx
FlushFileBuffers
GetCommandLineW
SetEnvironmentVariableW
GetEnvironmentVariableW
GetEnvironmentStringsW
GetCurrentDirectoryW
RtlCaptureContext
QueryPerformanceCounter
GetCurrentThread
AddVectoredExceptionHandler
FreeEnvironmentStringsW
FormatMessageW
GetFileAttributesW
FindFirstFileW
OpenProcess
ReadProcessMemory
WriteProcessMemory
SetFileAttributesW
CreateFileW
GetVersionExW
GetStringTypeW
CloseHandle
GetProcessIoCounters
GetSystemTimes
GetProcessHeap
VirtualQueryEx

advapi32

OpenProcessToken
IsValidSid
GetLengthSid
CopySid
GetTokenInformation

psapi

GetPerformanceInfo
GetProcessMemoryInfo
GetModuleFileNameExW

pdh

PdhAddCounterW
PdhCollectQueryData
PdhOpenQueryA
PdhCloseQuery
PdhRemoveCounter
PdhGetFormattedCounterValue

shell32

CommandLineToArgvW

powrprof

CallNtPowerInformation

oleaut32

SysFreeString
GetErrorInfo
SysStringLen

ntdll

NtReadFile
NtCreateFile
RtlNtStatusToDosError
NtQueryInformationProcess
NtQuerySystemInformation
NtWriteFile
RtlGetVersion

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 144.1MB - Virtual size: 144.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Plants Vs Zombies Hybrid English v2.5 v1.3/config.toml
Plants Vs Zombies Hybrid English v2.5 v1.3/fonts/fzcq.ttf
Plants Vs Zombies Hybrid English v2.5 v1.3/fonts/fzjz.ttf
Plants Vs Zombies Hybrid English v2.5 v1.3/fonts/fzkt.TTF
Plants Vs Zombies Hybrid English v2.5 v1.3/fonts/fzyh.ttf
Plants Vs Zombies Hybrid English v2.5 v1.3/fonts/wryh+pico12num.ttf
Plants Vs Zombies Hybrid English v2.5 v1.3/fonts/wryh.ttf
Plants Vs Zombies Hybrid English v2.5 v1.3/main.pak

Sharing

General

Malware Config

Signatures

Files

baae94c249ba146bfd59fa89a7d865f4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

psapi

pdh

shell32

powrprof

oleaut32

ntdll

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 144.1MB - Virtual size: 144.1MB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 265KB - Virtual size: 264KB

.reloc Size: 62KB - Virtual size: 61KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 144.1MB - Virtual size: 144.1MB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 265KB - Virtual size: 264KB

.reloc
Size: 62KB - Virtual size: 61KB