game[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
game.exe
Size 82KB
Sample260709-phv92sbv2t
SHA256 43cf5129185117ee90044cf5746fa9921d7cd4b07375915db7bc66f2931b54bd
MD5 bce727176a18c423fda7c7c0facc2f18
SHA1 4d4e1c2e3d2c6580925bef6ad74d6f771de02674
SHA512 ce4d9c86104a72e59364a2caf013918b46397125c726c7d1a5de9484a2092df551f053f105bc7f2e37fc57e4de3dd35fe1be8270b9e17c56ee00a1bbbf202b15
SSDEEP 768:ms5J1Eq8wNAS8f/QmqmzPP3lLuzZPKq2rqSUUt0L+D6WA2T34cOUT:msUwNYfNqgPP3lLuBZ2LDOY6vZcOUT
TLSH
T19B83B68376974DBAECD1177C60DB932ECA2DFD60CF224BABE714A4344653285357A382
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
game.exe

File Explorer

game.exe

.exe 82KB

game.exe

IMPHASH 0c20dfbb26ce12a522d62ef8ca868edd
SHA256 43cf5129185117ee90044cf5746fa9921d7cd4b07375915db7bc66f2931b54bd
MD5 bce727176a18c423fda7c7c0facc2f18
SHA1 4d4e1c2e3d2c6580925bef6ad74d6f771de02674
SHA512 ce4d9c86104a72e59364a2caf013918b46397125c726c7d1a5de9484a2092df551f053f105bc7f2e37fc57e4de3dd35fe1be8270b9e17c56ee00a1bbbf202b15
SSDEEP 768:ms5J1Eq8wNAS8f/QmqmzPP3lLuzZPKq2rqSUUt0L+D6WA2T34cOUT:msUwNYfNqgPP3lLuBZ2LDOY6vZcOUT
TLSH
T19B83B68376974DBAECD1177C60DB932ECA2DFD60CF224BABE714A4344653285357A382
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4832

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteCriticalSection EnterCriticalSection ExitProcess FindClose FindFirstFileA FindNextFileA FreeLibrary GetCommandLineA GetLastError GetModuleHandleA GetProcAddress InitializeCriticalSection LeaveCriticalSection LoadLibraryA SetUnhandledExceptionFilter TlsGetValue VirtualProtect VirtualQuery

msvcrt

_strdup _stricoll __getmainargs __mb_cur_max __p__environ __p__fmode __set_app_type _cexit _errno _fpreset _fullpath _iob _isctype _onexit _pctype _setmode abort atexit calloc free fwrite malloc mbstowcs memcmp memcpy rand realloc setlocale signal srand strcoll strlen time tolower vfprintf wcstombs

libgcc_s_dw2-1

_Unwind_Resume __deregister_frame_info __register_frame_info

libstdc++-6

_ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4dataEv _ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE4sizeEv _ZNKSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE7compareEPKc _ZNSaIcEC1Ev _ZNSaIcED1Ev _ZNSolsEPFRSoS_E _ZNSolsEd _ZNSolsEi _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE3endEv _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEE5beginEv _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1EPKcRKS3_ _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1ERKS4_ _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1EjcRKS3_ _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEC1Ev _ZNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEED1Ev _ZNSt8ios_base4InitC1Ev _ZNSt8ios_base4InitD1Ev _ZSt17__throw_bad_allocv _ZSt3cin _ZSt4cout _ZSt4endlIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_ _ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc _ZStlsIcSt11char_traitsIcESaIcEERSt13basic_ostreamIT_T0_ES7_RKNSt7__cxx1112basic_stringIS4_S5_T1_EE _ZStrsIcSt11char_traitsIcESaIcEERSt13basic_istreamIT_T0_ES7_RNSt7__cxx1112basic_stringIS4_S5_T1_EE _ZdlPv _Znwj __cxa_begin_catch __cxa_end_catch __cxa_rethrow __gxx_personality_v0

Name

.text

Size

17KB

Virtual Size

17KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

28B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

/14

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/29

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/41

Size

512B

Virtual Size

303B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/55

Size

512B

Virtual Size

456B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/67

Size

512B

Virtual Size

56B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

game.exe

kernel32

msvcrt

libgcc_s_dw2-1

libstdc++-6

generic