scheroes[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

scheroes.exe
Size

1.3MB
MD5

0f10babe23bef94b8b5457ae762e4b0d
SHA1

5fab8854855da96711cf36db14a42a5835bba83c
SHA256

c3b5275d15a4dfcc38a2eb77e502f07ce702b64e81788e63689d70da9bcff548
SHA512

f9a4568280c56d35a0cb20272b28c85af6c8e35e48cc1b77707d2715eb221f95dc4d9fdd10a0ebf3fa79c2fc2e679ab4b4e0b4577ca5b5d756bf1d2515d3a6ec
SSDEEP

12288:pHHgykBh/0E9mD3/i3QsELpdnRXTfXTLLG:O6GCig5DnRXjXvLG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
scheroes.exe

Files

scheroes.exe
.exe windows:5 windows x86 arch:x86

dcbfe89700a1e852c299600253f2f119

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

dinput8

DirectInput8Create

d3d9

Direct3DCreate9

d3dx9_42

D3DXCreateTextureFromResourceW
D3DXMatrixPerspectiveFovLH
D3DXMatrixMultiply
D3DXMatrixScaling
D3DXLoadSurfaceFromMemory
D3DXMatrixRotationY
D3DXGetImageInfoFromResourceW
D3DXCreateSprite
D3DXMatrixRotationZ
D3DXVec3Normalize
D3DXMatrixLookAtLH
D3DXMatrixReflect
D3DXMatrixRotationX

dsound

ord11

comctl32

InitCommonControlsEx

kernel32

GetLocaleInfoA
GetSystemDefaultLCID
FindResourceW
LoadResource
Sleep
SizeofResource
GetModuleHandleW
QueryPerformanceCounter
WaitForSingleObject
GetTickCount
QueryPerformanceFrequency
FindFirstFileW
FindClose
FindNextFileW
DeleteFileW
GetCurrentProcess
VirtualFree
VirtualAlloc
VirtualProtect
CreateFileW
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
CreateFileA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameW
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
ReadFile
MultiByteToWideChar
RtlUnwind
RaiseException
GetModuleFileNameA
GetStdHandle
WriteFile
HeapReAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapCreate
ExitProcess
HeapSize
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
GetFileAttributesW
CreateDirectoryW
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetModuleHandleA
SetEndOfFile
GetProcessHeap
GetSystemTimeAsFileTime
GetFileAttributesA
CreateDirectoryA
HeapAlloc
ExitThread
CloseHandle
GetLastError
ResumeThread
CreateThread
HeapFree

user32

HideCaret
IsWindowEnabled
SetFocus
InflateRect
GetDlgItem
CheckDlgButton
IsDlgButtonChecked
CheckRadioButton
GetDlgItemTextW
SetDlgItemTextW
EnableWindow
GetDlgItemTextA
TranslateAcceleratorW
SetCapture
UnregisterClassW
LoadStringA
LoadCursorW
TranslateMessage
LoadAcceleratorsW
LoadIconW
PeekMessageW
SetWindowPos
GetCursorPos
ReleaseCapture
IsWindowVisible
SetWindowTextA
UpdateWindow
AdjustWindowRect
SetWindowTextW
DispatchMessageW
GetClientRect
ShowCursor
wsprintfW
GetSystemMetrics
FrameRect
DestroyWindow
SetTimer
PostQuitMessage
KillTimer
GetParent
TrackMouseEvent
GetClassInfoExW
RegisterClassExW
GetWindowLongW
SetWindowLongW
ShowWindow
CreateWindowExW
SendMessageW
DefWindowProcW
EndPaint
GetWindowRect
FillRect
LoadImageW
DrawTextA
DialogBoxParamW
BeginPaint
GetDC
MessageBoxA
ReleaseDC
EndDialog
MoveWindow
LoadStringW
MessageBoxW

gdi32

DeleteObject
SelectObject
SelectClipRgn
SetBkColor
CreateFontW
GetObjectW
CreateRectRgn
CreateSolidBrush
DeleteDC
SetTextColor
BitBlt
CreateCompatibleDC

shell32

SHGetFolderPathW
SHGetFolderPathA

Sections

.text
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 846KB - Virtual size: 846KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcbfe89700a1e852c299600253f2f119

Headers

DLL Characteristics

File Characteristics

Imports

dinput8

d3d9

d3dx9_42

dsound

comctl32

kernel32

user32

gdi32

shell32

Sections

.text Size: 321KB - Virtual size: 321KB

.rdata Size: 111KB - Virtual size: 111KB

.data Size: 7KB - Virtual size: 2.8MB

.rsrc Size: 846KB - Virtual size: 846KB

.reloc Size: 36KB - Virtual size: 36KB

.text
Size: 321KB - Virtual size: 321KB

.rdata
Size: 111KB - Virtual size: 111KB

.data
Size: 7KB - Virtual size: 2.8MB

.rsrc
Size: 846KB - Virtual size: 846KB

.reloc
Size: 36KB - Virtual size: 36KB