super-mario-ghost-deluxe[.]exe

General

Target
super-mario-ghost-deluxe.exe
Size 126.6MB
Sample260511-e4xd5abt3z
SHA256 6128ef23300382672e4b4107462dac24e44927bd614e84a64b53663dfa30eaf8
MD5 047d18e73e0996c0442634635b9fb0a6
SHA1 389224f5d644686f751b57521762ca64d00f863c
SHA512 fe6bf619019b045ff9c4521cf22abf54dfb96937c7a63536e36b14bb90c2be08ce4e0341aca4d414f508ed1b1e2693fe5cc4d8a2949f502f3aa08a981575af70
SSDEEP 3145728:pZBhls7CL81I3D7ZyPttD6QGzfYHXjFuSGMf4+c8ziyK/Ajw2:pL3suLPXQ1tD6LrAEVMA+c8zU/Gw2
TLSH
T1B5583321DB595D0AF5A42C338FBAB235CAC18279D8A237D7956027833B8F7F417258B4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
super-mario-ghost-deluxe.exe

File Explorer

super-mario-ghost-deluxe.exe

.exe 126.6MB

super-mario-ghost-deluxe.exe

IMPHASH faac987cca0c4b64dfdd5177ceabbd32
SHA256 6128ef23300382672e4b4107462dac24e44927bd614e84a64b53663dfa30eaf8
MD5 047d18e73e0996c0442634635b9fb0a6
SHA1 389224f5d644686f751b57521762ca64d00f863c
SHA512 fe6bf619019b045ff9c4521cf22abf54dfb96937c7a63536e36b14bb90c2be08ce4e0341aca4d414f508ed1b1e2693fe5cc4d8a2949f502f3aa08a981575af70
SSDEEP 3145728:pZBhls7CL81I3D7ZyPttD6QGzfYHXjFuSGMf4+c8ziyK/Ajw2:pL3suLPXQ1tD6LrAEVMA+c8zU/Gw2
TLSH
T1B5583321DB595D0AF5A42C338FBAB235CAC18279D8A237D7956027833B8F7F417258B4
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26224

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetExitCodeProcess Sleep FindClose CloseHandle GetModuleFileNameW CreateProcessW GetCommandLineW GetTempPathW GetTempFileNameW SetCurrentDirectoryW CreateDirectoryW RemoveDirectoryW FindFirstFileW FindNextFileW CreateFileW GetLastError ReadFile WriteFile SetFilePointer WideCharToMultiByte MultiByteToWideChar SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers LoadLibraryW OutputDebugStringW LoadLibraryExW IsDebuggerPresent IsProcessorFeaturePresent HeapFree DeleteFileW SetEnvironmentVariableW GetCurrentDirectoryW GetCommandLineA HeapAlloc EncodePointer DecodePointer RtlUnwind HeapCompact HeapReAlloc HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter SetLastError InitializeCriticalSectionAndSpinCount GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetStartupInfoW GetModuleHandleW GetProcAddress InterlockedIncrement InterlockedDecrement IsValidCodePage GetACP GetOEMCP GetCPInfo GetCurrentThreadId GetProcessHeap ExitProcess GetModuleHandleExW GetStdHandle GetFileType DeleteCriticalSection GetModuleFileNameA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW RaiseException EnterCriticalSection LeaveCriticalSection GetStringTypeW LCMapStringW WriteConsoleW

user32

LoadStringW MessageBoxW MsgWaitForMultipleObjects PeekMessageW DispatchMessageW TranslateMessage GetMessageW wsprintfW

Sharing