Lala and the Bizarre Dungeon[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Lala and the Bizarre Dungeon.exe
Size 437.2MB
Sample260703-bew6aahv4s
SHA256 20a5787863f41cabdd209566ea50dde32124816ac51d8249b7689ff1a9f1cd40
MD5 04dea4bbfbb477d87a553c2c8c0679ad
SHA1 8fb65c3708c82917600bdbd2b16be28f3bc84756
SHA512 b319203e6860dee457de99a6b28d44d9269e6786ef6e12cd0753f62cf731a88097b60efcb299c92d84112f9b357868d2c8d86c25140c0ac1274efd05c63948e0
SSDEEP 6291456:uJZjiP05I2GxPpJ2j9RvI8PpJAe003sx9ixOoSDgb:Z2G4PpJA31+yD+
TLSH
T13B291220DFC4E5A7F2B874BF19A678A781DF9DA129D3E40A4A163F4778B2F181535320
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lala and the Bizarre Dungeon.exe

File Explorer

Lala and the Bizarre Dungeon.exe

.exe 437.2MB

Lala and the Bizarre Dungeon.exe

IMPHASH 22c9f85bf1f9027f717508287a821a9d
SHA256 20a5787863f41cabdd209566ea50dde32124816ac51d8249b7689ff1a9f1cd40
MD5 04dea4bbfbb477d87a553c2c8c0679ad
SHA1 8fb65c3708c82917600bdbd2b16be28f3bc84756
SHA512 b319203e6860dee457de99a6b28d44d9269e6786ef6e12cd0753f62cf731a88097b60efcb299c92d84112f9b357868d2c8d86c25140c0ac1274efd05c63948e0
SSDEEP 6291456:uJZjiP05I2GxPpJ2j9RvI8PpJAe003sx9ixOoSDgb:Z2G4PpJA31+yD+
TLSH
T13B291220DFC4E5A7F2B874BF19A678A781DF9DA129D3E40A4A163F4778B2F181535320
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

29934

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

E:\mmf2_refresh_unicode\Launcher\Obj\Unicode\ReleaseDev\lnchrt.pdb

kernel32

GetExitCodeProcess Sleep FindClose CloseHandle GetModuleFileNameW CreateProcessW GetCommandLineW GetTempPathW GetTempFileNameW SetCurrentDirectoryW CreateDirectoryW RemoveDirectoryW FindFirstFileW FindNextFileW CreateFileA CreateFileW GetLastError ReadFile WriteFile SetFilePointer FindFirstFileA WideCharToMultiByte MultiByteToWideChar WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers SetConsoleCtrlHandler GetStringTypeW GetFileType SetStdHandle EnumSystemLocalesW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwind InterlockedPushEntrySList InterlockedFlushSList RaiseException SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW DeleteFileW SetEnvironmentVariableA SetEnvironmentVariableW SetCurrentDirectoryA GetCurrentDirectoryA GetCurrentDirectoryW HeapCompact HeapSize GetStdHandle GetModuleFileNameA ExitProcess GetModuleHandleExW GetACP GetCurrentThread HeapAlloc HeapFree GetProcessHeap HeapReAlloc OutputDebugStringA OutputDebugStringW WaitForSingleObjectEx CreateThread FindFirstFileExA FindFirstFileExW FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID DecodePointer

user32

MsgWaitForMultipleObjects PeekMessageW LoadStringW TranslateMessage GetMessageW wsprintfW DispatchMessageW MessageBoxW