Game[.]exe | Triage™

General

Target
Game.exe
Size 137KB
Sample260701-zee4rset7l
SHA256 e5435c0e86a8181a3d88206d5dd47145f2aa768afcae6d8c2ae449f8601a8724
MD5 bd9ebb7d09f9111a9f0a0ba2238eaf80
SHA1 28c753124d845f61373be87d392ab839914ebdc5
SHA512 f2dcdc9a1e64af74eeded730112d87d97ca2e5d894f25324b27c5f1b0680c948e3bcc73136615a4822ac6a75ac43c3b21fb8dcd031ae4203c2798bc6f9773231
SSDEEP 3072:fWK+I+/wslzo5lwTU6gixJpLOaHIYsrIjPW4:fWK+xZSixJEaoYsM+4
TLSH
T1CCD3CF15B990D433C10508355869CBB96A3DBC333A669647BF952FFF2F213C5863A389
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Game.exe

File Explorer

Game.exe

.exe 137KB

Game.exe

IMPHASH 2ccdef407f36a7b89af6047624f622a1
SHA256 e5435c0e86a8181a3d88206d5dd47145f2aa768afcae6d8c2ae449f8601a8724
MD5 bd9ebb7d09f9111a9f0a0ba2238eaf80
SHA1 28c753124d845f61373be87d392ab839914ebdc5
SHA512 f2dcdc9a1e64af74eeded730112d87d97ca2e5d894f25324b27c5f1b0680c948e3bcc73136615a4822ac6a75ac43c3b21fb8dcd031ae4203c2798bc6f9773231
SSDEEP 3072:fWK+I+/wslzo5lwTU6gixJpLOaHIYsrIjPW4:fWK+xZSixJEaoYsM+4
TLSH
T1CCD3CF15B990D433C10508355869CBB96A3DBC333A669647BF952FFF2F213C5863A389
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

9710

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetTickCount SetConsoleTitleW AllocConsole GetModuleHandleW GetPrivateProfileStringW GetFileAttributesW SetCurrentDirectoryW GetModuleFileNameW LCMapStringW LCMapStringA GetVersionExW GetStringTypeA WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile MultiByteToWideChar GetProcessHeap SetEndOfFile SetFilePointer SetStdHandle FormatMessageW GetLastError GetUserDefaultUILanguage GetProcAddress GetStringTypeW LoadLibraryW EnterCriticalSection LeaveCriticalSection Sleep ExitProcess GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent SetHandleCount GetStdHandle GetFileType DeleteCriticalSection HeapFree TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetModuleFileNameA LoadLibraryA InitializeCriticalSectionAndSpinCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW HeapCreate VirtualFree QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime CloseHandle CreateFileA RtlUnwind HeapAlloc HeapReAlloc VirtualAlloc GetConsoleCP GetConsoleMode FlushFileBuffers GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize GetLocaleInfoA

user32

DefWindowProcW LoadIconW LoadCursorW RegisterClassW CreateWindowExW SetRect GetWindowLongW AdjustWindowRectEx GetSystemMetrics SetWindowPos ShowWindow GetDC FillRect ReleaseDC PeekMessageW GetMessageW DispatchMessageW MessageBoxW LoadStringW wsprintfW

gdi32

GetStockObject

advapi32

RegQueryValueExW RegCloseKey RegOpenKeyExW

Sharing