7728a88210f4a92bbe81dde50783d65f5506250c3c3dfa4ddf37fe45d54dc9b3

Sharing

Copy URL Twitter E-mail

General

Target

7728a88210f4a92bbe81dde50783d65f5506250c3c3dfa4ddf37fe45d54dc9b3
Size

2.3MB
MD5

53d1eda6681aa8d77a6314d60d630753
SHA1

9b29722d9e12ed77cb4a4ec7c7986b0af7264fe3
SHA256

7728a88210f4a92bbe81dde50783d65f5506250c3c3dfa4ddf37fe45d54dc9b3
SHA512

7195f798145cd599f05d8b1097ceba3415a851fab34d555c545edf846cb770ac6b1a0807556d7a734cec779da0448d9bbc9390464925709956fd16861ee85cf4
SSDEEP

49152:O2oSkE1ZaQrfgjNCs/1zvgvHzvnfKWbkTh8yRUVzT56DebLmp/kTlsTDy8310aPq:sS31Q+1s/1zv0vnfhKR416Debmnf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7728a88210f4a92bbe81dde50783d65f5506250c3c3dfa4ddf37fe45d54dc9b3

Files

7728a88210f4a92bbe81dde50783d65f5506250c3c3dfa4ddf37fe45d54dc9b3
.exe windows:5 windows x86 arch:x86

a081830357b802186edb218124a62728

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\git\game-plugin-box\Main\Release\update.pdb

Imports

kernel32

GetModuleHandleA
FindClose
GlobalUnlock
GetStartupInfoW
GetTimeZoneInformation
GetModuleFileNameW
ReadFile
LoadLibraryW
GlobalAlloc
WriteFile
GlobalLock
InterlockedDecrement
SetFilePointer
GetFileSize
TerminateThread
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
GetProcAddress
TerminateProcess
OpenProcess
GetModuleHandleW
WaitForSingleObject
GetCurrentProcess
SetEnvironmentVariableA
CompareStringW
CompareStringA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
SetEndOfFile
FlushFileBuffers
GetCurrentDirectoryA
GetCurrentThreadId
ResumeThread
Sleep
MultiByteToWideChar
GetLastError
CreateSemaphoreA
CloseHandle
GetFileAttributesExW
GetFileSizeEx
CreateFileW
WideCharToMultiByte
CreateDirectoryW
InitializeCriticalSection
ExitProcess
GetFullPathNameA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStartupInfoA
SetHandleCount
SetStdHandle
LCMapStringA
VirtualAlloc
VirtualFree
HeapCreate
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
GetConsoleCP
GetModuleFileNameA
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
InterlockedExchange
SetConsoleCtrlHandler
CreateFileA
GetFileInformationByHandle
GetDriveTypeA
HeapReAlloc
RtlUnwind
RaiseException
CreateThread
ExitThread
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FlushConsoleInputBuffer
FindFirstFileA
GlobalMemoryStatus
GetCurrentProcessId
QueryPerformanceCounter
GetVersion
LoadLibraryA
GetSystemDirectoryA
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
LockResource
SizeofResource
FreeResource
LoadResource
FindResourceW
GetCurrentDirectoryW
GetTickCount
GetACP
SystemTimeToFileTime
GetFileAttributesW
LocalFileTimeToFileTime
SetFileTime
MulDiv
InterlockedIncrement
GetLocalTime
HeapFree
GetProcessHeap
SetLastError
FormatMessageA
SleepEx
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
FreeLibrary
ExpandEnvironmentStringsA
VerifyVersionInfoA
VerSetConditionMask

user32

IsIconic
GetWindowRect
PostMessageW
GetMonitorInfoW
SetTimer
GetClientRect
ShowWindow
MonitorFromWindow
MessageBoxW
KillTimer
SetWindowLongW
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
GetWindowTextW
SetWindowTextW
GetWindowTextLengthW
MoveWindow
GetGUIThreadInfo
CreateAcceleratorTableW
InvalidateRgn
CreatePopupMenu
AppendMenuW
SetForegroundWindow
IsWindow
ScreenToClient
TrackPopupMenu
GetCaretBlinkTime
GetSysColor
ClientToScreen
GetCaretPos
SetCaretPos
ShowCaret
HideCaret
CreateCaret
SetRect
CharPrevW
DrawTextW
FillRect
SetCursor
FindWindowW
GetWindowLongW
SetWindowPos
ReleaseDC
DestroyWindow
GetDC
SendMessageW
GetKeyState
GetFocus
GetCursorPos
CreateWindowExW
MapWindowPoints
PtInRect
IntersectRect
IsWindowVisible
GetUpdateRect
IsRectEmpty
EndPaint
BeginPaint
SetFocus
GetParent
GetWindow
GetActiveWindow
UnionRect
InvalidateRect
DispatchMessageW
TranslateMessage
GetMessageW
SetCapture
ReleaseCapture
CharNextW
DefWindowProcW
PostQuitMessage
EnableWindow
RegisterClassW
LoadCursorW
RegisterClassExW
GetClassInfoExW
CallWindowProcW
GetPropW
SetPropW
OffsetRect
wvsprintfW

gdi32

CreatePen
SetBkColor
SelectClipRgn
GetTextMetricsW
CombineRgn
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SaveDC
BitBlt
RestoreDC
Rectangle
SetWindowOrgEx
DeleteDC
GetStockObject
GetCharABCWidthsW
GetTextExtentPoint32W
DeleteObject
GetObjectW
CreateRectRgnIndirect
GetClipBox
CreateRoundRectRgn
CreateDIBSection
StretchBlt
SetStretchBltMode
CreateSolidBrush
LineTo
MoveToEx
CreatePenIndirect
RoundRect
TextOutW
SetBkMode
CreateFontIndirectW
CreatePatternBrush
GetObjectA
GetDeviceCaps
GdiFlush
ExtSelectClipRgn
SetTextColor

advapi32

ReportEventA
RegisterEventSourceA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
DeregisterEventSource

shell32

ShellExecuteW

ole32

CLSIDFromProgID
OleLockRunning
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance
CLSIDFromString

oleaut32

VariantClear
SysFreeString
VariantInit
SysAllocString

gdiplus

GdipGraphicsClear
GdipSetCompositingQuality
GdipCreateLineBrushI
GdipGetFamily
GdipSetSolidFillColor
GdipDrawImage
GdipDeleteFontFamily
GdipCloneImage
GdipSetInterpolationMode
GdipDisposeImage
GdipAlloc
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSetPixelOffsetMode
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdiplusStartup
GdiplusShutdown
GdipDeletePath
GdipDeleteRegion
GdipDeleteBrush
GdipFillRegion
GdipSetPathGradientFocusScales
GdipSetPathGradientCenterColor
GdipCombineRegionRegion
GdipCreateRegionPath
GdipCreateRegionRect
GdipAddPathLineI
GdipAddPathArcI
GdipCreatePath
GdipSetPageUnit
GdipCreateFromHDC
GdipCloneBrush
GdipCreatePathGradientFromPath
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount
GdipDrawImageI
GdipDeleteFont
GdipDeleteStringFormat
GdipDrawString
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateStringFormat
GdipSetTextRenderingHint
GdipDeletePen
GdipSetPenEndCap
GdipSetPenStartCap
GdipCreatePen2
GdipFillRectangleI
GdipSetSmoothingMode
GdipCreateSolidFill
GdipDrawLine
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDrawImageRect
GdipGetImageHeight
GdipGetImageWidth
GdipRotateWorldTransform
GdipFree

shlwapi

PathIsDirectoryW

ws2_32

WSAGetLastError
select
recv
send
WSAIoctl
setsockopt
WSACleanup
WSAStartup
gethostname
WSASetLastError
__WSAFDIsSet
getsockname
ntohs
bind
htons
getsockopt
getpeername
closesocket
socket
connect
freeaddrinfo
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
shutdown
htonl
getservbyname
gethostbyname

wldap32

ord22
ord211
ord143
ord60
ord50
ord26
ord30
ord200
ord32
ord35
ord79
ord33
ord301
ord27
ord41
ord46

comctl32

_TrackMouseEvent
ord17

imm32

ImmSetCompositionFontW
ImmSetCompositionWindow
ImmGetContext
ImmReleaseContext

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 392KB - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 17B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a081830357b802186edb218124a62728

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

shlwapi

ws2_32

wldap32

comctl32

imm32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 392KB - Virtual size: 392KB

.data Size: 44KB - Virtual size: 61KB

.tls Size: 512B - Virtual size: 17B

.rsrc Size: 107KB - Virtual size: 107KB

.reloc Size: 90KB - Virtual size: 90KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 392KB - Virtual size: 392KB

.data
Size: 44KB - Virtual size: 61KB

.tls
Size: 512B - Virtual size: 17B

.rsrc
Size: 107KB - Virtual size: 107KB

.reloc
Size: 90KB - Virtual size: 90KB