Gaming Chair[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Gaming Chair.exe
Size

2.1MB
MD5

9503205a5f7581720f7fa6348c49a93b
SHA1

34453ec11bb30ae10519a468deaefbf3f965fe3a
SHA256

0dca41e17e4f286a420dd2e6fbbd9ad460f1dac1f3de83672fa9de977f6b6402
SHA512

0524cabf5d0b87bf6f34a1c2e2cc3eef85e95e5b3fdd66fc60e5e07e4c0ce7cdbeb9eca7778bae5b4a0302ce822a08ce30c346d62bdbd746e2c8c6c8fe015191
SSDEEP

49152:xMi7EDQljtuC9Ss8k9yi83GMB5rr3KJPjFJa9Ndcs8Mcs8Mcs8Mcs8M7Lbr7Lbr6:xBYDQ1th9SVk99scB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Gaming Chair.exe

Files

Gaming Chair.exe
.exe windows:6 windows x86 arch:x86

6b7988a683630b777528ba0ecd834ddc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\My Source\AbuserMTA-Injector\Release\AbuserMTA-Injector.pdb

Imports

kernel32

GetCurrentProcess
SetConsoleScreenBufferSize
GetStdHandle
GetConsoleCursorInfo
InitializeCriticalSectionEx
OpenProcess
CreateToolhelp32Snapshot
Sleep
GetLastError
SetConsoleCursorInfo
Process32Next
CloseHandle
DeleteCriticalSection
ExitProcess
SetConsoleTitleA
GetConsoleWindow
lstrcmpiA
WriteProcessMemory
LoadLibraryA
VirtualProtectEx
GetProcAddress
VirtualAllocEx
ReadProcessMemory
CreateRemoteThread
VirtualFreeEx
GetExitCodeProcess
IsDebuggerPresent
OutputDebugStringW
GetConsoleScreenBufferInfo
Process32First
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead

user32

MoveWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
SetLayeredWindowAttributes

advapi32

LookupPrivilegeValueA
OpenProcessToken
AdjustTokenPrivileges

msvcp140

?good@ios_base@std@@QBE_NXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
_Query_perf_frequency
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
_Cnd_do_broadcast_at_thread_exit
_Query_perf_counter
_Thrd_detach
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__CxxFrameHandler3
__std_terminate
__std_exception_copy
memset
_CxxThrowException
__current_exception
_except_handler4_common
__current_exception_context
__std_exception_destroy
memcpy

api-ms-win-crt-runtime-l1-1-0

system
_register_thread_local_exe_atexit_callback
__p___argv
terminate
_controlfp_s
_beginthreadex
_get_initial_narrow_environment
__p___argc
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_exit
exit
_initterm_e
_invalid_parameter_noinfo_noreturn
_c_exit
_initterm

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

�!�T�u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6b7988a683630b777528ba0ecd834ddc

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 2.1MB - Virtual size: 2.1MB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 944B

�!�T�u� Size: 16KB - Virtual size: 20KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 2.1MB - Virtual size: 2.1MB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 944B

�!�T�u�
Size: 16KB - Virtual size: 20KB