madspiel.zip
- SHA256 cef78464aef6b8e0a88d08e120f5bb3970be1dd1d6ef96e20b8f630fc14e257d
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target madspiel.zip
- Size 3.0MB
- Sample260716-phpr9sc13m
- SHA256 cef78464aef6b8e0a88d08e120f5bb3970be1dd1d6ef96e20b8f630fc14e257d
- MD5 c867a20540e81c3e19a992f27d55bf4c
- SHA1 7a9dbaeee96220391ed9d7bb24cef98cb4577c72
- SHA512 b728ec3364fe94a0004fb81081e8c734dbbf3a409de3b98fe7596b91ee80563b1533fa6a4ee4d236ea69888ff43cc2ee96af16b5cdfde552709774db545caac9
- SSDEEP 49152:551+FSqyZJUnXNFyal0fpySspkSgv1BuKU6C2IIRluUINzArDX/quCK:z19gYN0kSgta2IKlKNMT/quZ
- TLSH T1F1E533B14C039209A4DC382BE2D2E9DF6BA05590D572CBFB1E31B17FD9E229D424985A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/setup.exe
File Explorer
-
madspiel.zip.zip 3.0MB
-
madgame.dat2.9MB
-
setup.bin478B
-
setup.exe.exe 45KB
madgame.dat
- SHA256 dd8b1fbb02d1e7cd35fc335752da4f9bea50f0223caf74b50d8d538b5537aee5
- MD5 09de70ec2f106c78dc3446bf0714d6a5
- SHA1 b183b602c1949a7d935f8442e377251f916fee52
- SHA512 f30fd6bd705e6242dde1262baa98e1138027700eadc8059cfda6cad6c2e6379e8bd9623649ba303a7764b2978da06e3ca47b5de727bd108296728dd11facbfba
- SSDEEP 49152:zD+1aCWkOtVHcbosaB3TmPialLb4ZGVyye5Ek171h2jq5VCGVpGFYTsgRQsNzunz:nA/On8csaFw8ZG1MEk1Z/AG7hN4tOvQx
- TLSH T10DE533F77C404398B3E5B29499D6F509B6706330FCC3CAAD8D24F58E9DE360D864889A
- MD5 SHA1 SHA512 SSDEEP TLSH
setup.bin
- SHA256 eff77a7426262cfac4a6cb4d948cc28736d5eef7832cf159fef5bca1d0f36a28
- MD5 54b35c62daf80c13828e7b17dc51939a
- SHA1 2b6047f971f05b607041e04c753fc928faf51b9e
- SHA512 f070da5f233ad60e3907708d65673e82d10537909beaaa2d859ad0e8f3c71cdfd153a797cfd16155ee968ebd53f98b8183e6f087d9376328bba4fb89d4387490
- TLSH T188F08CA3AF122800CA2843320281F31C71A3B2F822B1062924C808CAA8250C42804BD3
- MD5 SHA1 SHA512 TLSH
setup.exe
- IMPHASH 1bae956695b5ccb4ddd551ccc4e5cd58
- SHA256 88c4c2b72dc1adbe7c4129ad7207550d263219ae8cc49aa18c6b6e7823b10742
- MD5 2db0d8723b60ff816d5887a47e4ad336
- SHA1 9ffb2835a18917603eab563c41bda5a4a272c21e
- SHA512 d4fe828a836620f57f1877e6b4c16b1b536c3ec81db01a09843eb39f82a87e01f4b13cd52cedc927630f4b0589bd90912ccbe215c058f90ac9143fff8b0e16a0
- SSDEEP 768:t5RyZf2XA9qmzhJUDwtny3aTwj8Vi9JoMWdR0d2BsK5:t5RO2XAMmzh6sdye+8VmJodR0z
- TLSH T181234A06A5E69133E0F5673108B52BB73D3BBD5027B68ADB97805C2CE8316E0CD3831A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
20368
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
version
VerFindFileA
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
_lclose
LocalAlloc
_lread
_llseek
_lopen
LocalFree
_hread
GlobalLock
_lcreat
GetWindowsDirectoryA
lstrlenA
GetDiskFreeSpaceA
GetPrivateProfileIntA
GetVersion
GlobalUnlock
GlobalAlloc
GetStringTypeW
GlobalFree
WritePrivateProfileStringA
LoadLibraryA
VirtualAlloc
GetProcAddress
GetModuleFileNameA
_lwrite
VirtualFree
GetStdHandle
GetFileType
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetHandleCount
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetEnvironmentStrings
GetCurrentProcess
TerminateProcess
RtlUnwind
HeapAlloc
HeapFree
ExitProcess
WideCharToMultiByte
LCMapStringA
LCMapStringW
GetOEMCP
GetACP
MultiByteToWideChar
GetCommandLineA
GetStartupInfoA
HeapCreate
WriteFile
GetCPInfo
GetModuleHandleA
GetStringTypeA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
CreateDirectoryA
GetLastError
user32
ShowWindow
CreateWindowExA
UpdateWindow
GetSystemMetrics
BringWindowToTop
IsIconic
GetLastActivePopup
SetActiveWindow
LoadCursorA
LoadIconA
DestroyWindow
SetWindowPos
PostMessageA
wsprintfA
BeginPaint
EndPaint
GetDlgItem
GetWindowRect
ScreenToClient
GetSysColor
RegisterClassA
DefWindowProcA
PostQuitMessage
EnableWindow
CheckRadioButton
DispatchMessageA
SetWindowLongA
DdeUninitialize
GetWindowLongA
DdeClientTransaction
DdeCreateStringHandleA
DdeConnect
DialogBoxParamA
DdeDisconnect
DdeFreeStringHandle
ReleaseDC
GetDC
FillRect
GetDlgItemTextA
EndDialog
MessageBoxA
PeekMessageA
LoadStringA
SetDlgItemTextA
IsDialogMessageA
CreateDialogParamA
GetMessageA
FindWindowA
TranslateMessage
DdeInitializeA
IsDlgButtonChecked
GetClientRect
gdi32
SetBkColor
DeleteDC
ExtTextOutA
SelectObject
BitBlt
DeleteObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
GetStockObject
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1024B
Virtual Size
949B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
5KB
Virtual Size
15KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
3KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
3KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ