Fireball-Fight-Mods[.]exe

Resubmissions

16/07/2026, 17:01

260716-vjvykahv8n7

16/07/2026, 17:00

260716-vjaydshv6r7

16/07/2026, 16:59

260716-vhm7bsdv7t

16/07/2026, 16:52

260716-vdfaxsht7q7

Sharing

Copy URL Twitter E-mail

General

Target
Fireball-Fight-Mods.exe
Size 36.9MB
Sample260716-vhm7bsdv7t
SHA256 c358d3d8ee3c4ada33fb1ee7529029fa208fd8fe72ce34240ee9e22a0b656569
MD5 1169b5a884083b07011e619466804432
SHA1 168b2a368c37b6e160984e00c741e48a9d573c63
SHA512 1c9c07754e70ed1e1474779896cb74fe4bd9183fcf81f5a57c91913239b29f91c1f120a43b1bc39dcf791449e19c621a59f5607d31023b694ac867f9ebc28fe7
SSDEEP 786432:+GkgywS7NCmRsd9DWYAjCZCo7Y7mN4hxOfvjwKF2GuLx:LVSZCd8/6r0HOfMKFLO
TLSH
T18387331BBEA505F4D0B68D7885775716FA707C59032096CB07A0A21AEFF37E0A93A7C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fireball-Fight-Mods.exe

File Explorer

Fireball-Fight-Mods.exe

.exe 36.9MB

Fireball-Fight-Mods.exe

IMPHASH e7f25102dfaaa743c572f7de56388bdf
SHA256 c358d3d8ee3c4ada33fb1ee7529029fa208fd8fe72ce34240ee9e22a0b656569
MD5 1169b5a884083b07011e619466804432
SHA1 168b2a368c37b6e160984e00c741e48a9d573c63
SHA512 1c9c07754e70ed1e1474779896cb74fe4bd9183fcf81f5a57c91913239b29f91c1f120a43b1bc39dcf791449e19c621a59f5607d31023b694ac867f9ebc28fe7
SSDEEP 786432:+GkgywS7NCmRsd9DWYAjCZCo7Y7mN4hxOfvjwKF2GuLx:LVSZCd8/6r0HOfMKFLO
TLSH
T18387331BBEA505F4D0B68D7885775716FA707C59032096CB07A0A21AEFF37E0A93A7C1
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

243616

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

msiwrapper.exe.pdb

msi

ord145 ord64 ord34 ord103 ord32 ord74 ord118 ord190 ord88 ord70 ord169 ord137 ord141 ord8 ord120 ord123 ord115 ord116 ord125 ord121 ord17 ord92 ord158 ord163 ord160 ord159 ord49

ole32

CoCreateGuid StringFromGUID2 IIDFromString

shell32

CommandLineToArgvW

shlwapi

PathIsDirectoryEmptyW

user32

MessageBoxW

kernel32

SetEndOfFile WriteConsoleW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW HeapReAlloc GetCurrentDirectoryW ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW VirtualProtect FlsFree FlsSetValue CloseHandle GetLastError WaitForSingleObject GetExitCodeProcess ResumeThread CreateProcessW GetProcessId AssignProcessToJobObject GetCurrentThreadId OpenMutexW LoadLibraryExW GetCurrentProcessId GetLocalTime LoadResource LockResource SizeofResource FindResourceW AllocConsole AttachConsole FreeLibrary GetModuleHandleExW GetProcAddress LoadLibraryW LocalFree FormatMessageW CreateDirectoryW CreateFileW DeleteFileW FindClose FindFirstFileW FindNextFileW GetFileAttributesW GetShortPathNameW RemoveDirectoryW SetFileAttributesW SetLastError GetTickCount CopyFileW MoveFileExW GetCommandLineW GetEnvironmentVariableW SetEnvironmentVariableW GetTempPathW GetSystemDirectoryW GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte RtlUnwind GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead FlsGetValue RtlPcToFileHeader RaiseException RtlUnwindEx InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetFullPathNameW GetDriveTypeW ExitProcess GetStdHandle WriteFile HeapAlloc HeapFree GetFileType FlsAlloc

Name

.text

Size

400KB

Virtual Size

400KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

114KB

Virtual Size

113KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

31KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

36.4MB

Virtual Size

36.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Fireball-Fight-Mods.exe

msi

ole32

shell32

shlwapi

user32

kernel32

generic