sonic-heroes (1)[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

sonic-heroes (1).rar
Size

2.0MB
MD5

046634879e8e495a07f59f1cd6c2e47f
SHA1

5e94e9fe7af19d24ba535b78a1d34aa4b4ee46d4
SHA256

7511a62cc8ccf80b88cf2e259de575df893b224d733aeee52555c48386a45f18
SHA512

ac987ddd68fc7f2e8ee6cd25c16d4e0c55e209fa375f9b65489e56e50238f25f7f0405a40f1f54435e2af47a68e8cc77dbcb26f3c835c479fec4bb04248ebc53
SSDEEP

49152:Xj8yyZEVxcg5O3oszh70LF+/uIG4FkaTsR11c1:XQyyZ0xcg5kl70h2vGdoUc1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/scheroes.exe

Files

sonic-heroes (1).rar
.rar
data/g0000.pak
scheroes.exe
.exe windows:5 windows x86 arch:x86

dcbfe89700a1e852c299600253f2f119

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

d3d9

Direct3DCreate9

d3dx9_42

D3DXCreateTextureFromResourceW
D3DXMatrixPerspectiveFovLH
D3DXMatrixMultiply
D3DXMatrixScaling
D3DXLoadSurfaceFromMemory
D3DXMatrixRotationY
D3DXGetImageInfoFromResourceW
D3DXCreateSprite
D3DXMatrixRotationZ
D3DXVec3Normalize
D3DXMatrixLookAtLH
D3DXMatrixReflect
D3DXMatrixRotationX

dsound

ord11

comctl32

InitCommonControlsEx

kernel32

GetLocaleInfoA
GetSystemDefaultLCID
FindResourceW
LoadResource
Sleep
SizeofResource
GetModuleHandleW
QueryPerformanceCounter
WaitForSingleObject
GetTickCount
QueryPerformanceFrequency
FindFirstFileW
FindClose
FindNextFileW
DeleteFileW
GetCurrentProcess
VirtualFree
VirtualAlloc
VirtualProtect
CreateFileW
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
ReadFile
MultiByteToWideChar
RtlUnwind
RaiseException
GetModuleFileNameA
GetStdHandle
WriteFile
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapCreate
ExitProcess
HeapSize
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetFileAttributesW
CreateDirectoryW
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleA
SetEndOfFile
GetProcessHeap
GetSystemTimeAsFileTime
GetFileAttributesA
CreateDirectoryA
HeapAlloc
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
HeapFree

user32

HideCaret
IsWindowEnabled
SetFocus
InflateRect
GetDlgItem
CheckDlgButton
IsDlgButtonChecked
CheckRadioButton
GetDlgItemTextW
SetDlgItemTextW
EnableWindow
GetDlgItemTextA
TranslateAcceleratorW
SetCapture
UnregisterClassW
LoadStringA
LoadCursorW
TranslateMessage
LoadAcceleratorsW
LoadIconW
PeekMessageW
SetWindowPos
GetCursorPos
ReleaseCapture
IsWindowVisible
SetWindowTextA
UpdateWindow
AdjustWindowRect
SetWindowTextW
DispatchMessageW
GetClientRect
ShowCursor
wsprintfW
GetSystemMetrics
FrameRect
DestroyWindow
SetTimer
PostQuitMessage
KillTimer
GetParent
TrackMouseEvent
GetClassInfoExW
RegisterClassExW
GetWindowLongW
SetWindowLongW
ShowWindow
CreateWindowExW
SendMessageW
DefWindowProcW
EndPaint
GetWindowRect
FillRect
LoadImageW
DrawTextA
DialogBoxParamW
BeginPaint
GetDC
MessageBoxA
ReleaseDC
EndDialog
MoveWindow
LoadStringW
MessageBoxW

gdi32

DeleteObject
SelectObject
SelectClipRgn
SetBkColor
CreateFontW
GetObjectW
CreateRectRgn
CreateSolidBrush
DeleteDC
SetTextColor
BitBlt
CreateCompatibleDC

shell32

SHGetFolderPathW
SHGetFolderPathA

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 846KB - Virtual size: 846KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcbfe89700a1e852c299600253f2f119

Headers

DLL Characteristics

File Characteristics

Imports

dinput8

d3d9

d3dx9_42

dsound

comctl32

kernel32

user32

gdi32

shell32

Sections

.text Size: 321KB - Virtual size: 321KB

.rdata Size: 111KB - Virtual size: 111KB

.data Size: 7KB - Virtual size: 2.8MB

.rsrc Size: 846KB - Virtual size: 846KB

.reloc Size: 36KB - Virtual size: 36KB

.text
Size: 321KB - Virtual size: 321KB

.rdata
Size: 111KB - Virtual size: 111KB

.data
Size: 7KB - Virtual size: 2.8MB

.rsrc
Size: 846KB - Virtual size: 846KB

.reloc
Size: 36KB - Virtual size: 36KB