620d021c450a57d17a45acbd1646464b6551f22adb29062d8d52e37d4294bc00

Sharing

Copy URL Twitter E-mail

General

Target
620d021c450a57d17a45acbd1646464b6551f22adb29062d8d52e37d4294bc00
Size 852KB
Sample260703-ffv2tsbv9t
SHA256 620d021c450a57d17a45acbd1646464b6551f22adb29062d8d52e37d4294bc00
MD5 1b7a85d673d4b85e6f86817c4c18e4e8
SHA1 aa05c1c4116146e7b7b45c91068b1aef90b4b2b0
SHA512 71e7beca28826567cc3335a0b1452e15c2e2f25e3d58185ff81e31c2fd49d7d8d338c854062e089a2419e3049baf6d278c8e8d23fd8ef4913604462d651d46eb
SSDEEP 6144:8/7FG9mpcJ/OD8SnB3RSSWqdHV+SHtXF7E6V8AB121PDi22jJsjq:8/744aOD8c2EQsVPTgmZp
TLSH
T105051742A6385C85E4764AF56512C63147152FE8B1AB838A05FFBD23F9F9E030D3BAD1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
620d021c450a57d17a45acbd1646464b6551f22adb29062d8d52e37d4294bc00

File Explorer

620d021c450a57d17a45acbd1646464b6551f22adb29062d8d52e37d4294bc00

.exe 852KB

620d021c450a57d17a45acbd1646464b6551f22adb29062d8d52e37d4294bc00

IMPHASH ce1183cc150987a99aef5749f22af81e
SHA256 620d021c450a57d17a45acbd1646464b6551f22adb29062d8d52e37d4294bc00
MD5 1b7a85d673d4b85e6f86817c4c18e4e8
SHA1 aa05c1c4116146e7b7b45c91068b1aef90b4b2b0
SHA512 71e7beca28826567cc3335a0b1452e15c2e2f25e3d58185ff81e31c2fd49d7d8d338c854062e089a2419e3049baf6d278c8e8d23fd8ef4913604462d651d46eb
SSDEEP 6144:8/7FG9mpcJ/OD8SnB3RSSWqdHV+SHtXF7E6V8AB121PDi22jJsjq:8/744aOD8c2EQsVPTgmZp
TLSH
T105051742A6385C85E4764AF56512C63147152FE8B1AB838A05FFBD23F9F9E030D3BAD1
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4704

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\WindowsPlayer\Win64_VS2019_dev_m_ut_r\WindowsPlayer_player_Release_mono_x64.pdb

unityplayer

UnityMain

kernel32

HeapAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW CloseHandle RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Name

.text

Size

50KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

37KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

552KB

Virtual Size

556KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.bind

Size

201KB

Virtual Size

204KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

620d021c450a57d17a45acbd1646464b6551f22adb29062d8d52e37d4294bc00

unityplayer

kernel32

generic