6_fraps2000full[.]rar

Sharing

Copy URL Twitter E-mail

General

Target
6_fraps2000full.rar
Size 230KB
Sample260723-w2jtpavckf
SHA256 299890615c783a17e9b0bcf15afba411daa30633b28367bbb42485f9b612cf25
MD5 f4dea5820769a7699eb97bc0ac7bc3d4
SHA1 d9ba3416630a805fed7d3a671ce44c07baf05982
SHA512 2870b67cc5ace73fd6d795318dae523cd4bcf7b0a73e01654dea52d9a92cc4fc012d04b84eaf959bd16e348bfed488f1c1f48f2d9098878b62046bdb95b20f83
SSDEEP 6144:9h2XZsOEoF47zcup843XJpaUJSQlMPwNWkHfy:9hhOfW7z1p8QJpz1wwNhfy
TLSH
T12C34128EAA9CF8680FE8F1F77F85844686895036C6D0DC8102736E553F90AF92759DCB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/fraps2000full.exe

File Explorer

6_fraps2000full.rar

.rar 230KB
fraps2000full.exe

.exe 366KB

6_fraps2000full.rar

SHA256 299890615c783a17e9b0bcf15afba411daa30633b28367bbb42485f9b612cf25
MD5 f4dea5820769a7699eb97bc0ac7bc3d4
SHA1 d9ba3416630a805fed7d3a671ce44c07baf05982
SHA512 2870b67cc5ace73fd6d795318dae523cd4bcf7b0a73e01654dea52d9a92cc4fc012d04b84eaf959bd16e348bfed488f1c1f48f2d9098878b62046bdb95b20f83
SSDEEP 6144:9h2XZsOEoF47zcup843XJpaUJSQlMPwNWkHfy:9hhOfW7z1p8QJpz1wwNhfy
TLSH
T12C34128EAA9CF8680FE8F1F77F85844686895036C6D0DC8102736E553F90AF92759DCB
MD5 SHA1 SHA512 SSDEEP TLSH

fraps2000full.exe

IMPHASH ec9fe2df073f9adb523d740ca14e7bb5
SHA256 72d0932fe8d4b768244c8e8d6276b5488e1bdfe6a331fd4ae1e4acd45f937447
MD5 8c23bc68c061cf97e067f911e369a8d2
SHA1 c12ef8fe1d13947e6545380193cc0e18bf6a6b92
SHA512 145a91fc4bfd64c783b39eb10c4ad3d7ac35561edb6ae032fdafbfa342355a5d2d90dd5da36a58b89bd00f608ec8dec464d41344db422c09a51cad17ac7b1ee4
SSDEEP 6144:rjjUGOUVo/orXhI8rm4Y4/qSzBPavoE0eQt:bcUVoiywCgqSdPa51Qt
TLSH
T13984DF416FC2C9A7D0424578DE36E2FFA7387E084AA5C7372AC8FE6B25317448537986
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

16454

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

ImageList_Create ord17 ImageList_AddMasked ImageList_Destroy

kernel32

FindFirstFileA CloseHandle SetFileTime CompareFileTime GetFileAttributesA GetTempFileNameA SearchPathA GetShortPathNameA GetFullPathNameA MoveFileA lstrcatA CreateDirectoryA SetCurrentDirectoryA SetFileAttributesA Sleep CopyFileA GetFileSize GetModuleFileNameA GetModuleHandleA lstrcpynA GetCommandLineA DeleteFileA GetTickCount GetUserDefaultLangID GetDiskFreeSpaceA GetVersion GlobalUnlock GlobalLock GlobalAlloc CreateThread CreateProcessA RemoveDirectoryA CreateFileA SetEndOfFile UnmapViewOfFile MapViewOfFile CreateFileMappingA GetWindowsDirectoryA lstrcpyA lstrlenA GetSystemDirectoryA MulDiv SetFilePointer ReadFile WriteFile GetPrivateProfileStringA FindNextFileA FindClose lstrcmpiA GetEnvironmentVariableA ExpandEnvironmentStringsA WritePrivateProfileStringA GlobalFree WaitForSingleObject GetExitCodeProcess LoadLibraryA GetProcAddress FreeLibrary MultiByteToWideChar GetCurrentProcess ExitProcess GetTempPathA

user32

SetTimer DestroyWindow CreateDialogParamA DialogBoxParamA GetClassInfoA CreateWindowExA SystemParametersInfoA RegisterClassA IsWindowEnabled EndDialog SetFocus SetWindowPos ScreenToClient GetWindowLongA EnableWindow SetClassLongA GetSysColor LoadCursorA SetCursor GetDlgItemTextA MapWindowPoints GetMessagePos LoadBitmapA CallWindowProcA CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu AppendMenuA CreatePopupMenu GetSystemMetrics SetDlgItemTextA MessageBoxA SetWindowTextA PostQuitMessage ShowWindow SetForegroundWindow CharNextA wsprintfA CharPrevA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA GetWindowRect LoadImageA GetDC PeekMessageA ExitWindowsEx SendMessageA DefWindowProcA BeginPaint GetClientRect SetRect FillRect GetWindowTextA DrawTextA EndPaint DispatchMessageA

gdi32

SetBkColor GetDeviceCaps CreateFontIndirectA CreateSolidBrush DeleteObject CreateFontA SetBkMode SetTextColor GetStockObject SelectObject

advapi32

RegEnumKeyA RegQueryValueExA RegSetValueExA RegCreateKeyA RegDeleteKeyA RegOpenKeyExA RegDeleteValueA RegCloseKey RegEnumValueA

shell32

ShellExecuteA SHGetMalloc SHGetPathFromIDListA SHBrowseForFolderA SHFileOperationA

ole32

OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA