RGDv1[.]5[.]4[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
RGDv1.5.4.zip
Size 248KB
Sample260728-aramdaeb85
SHA256 4c5496dd4019548564af1bca1a9663e65dc510a63fe41cf92398399117e7ac2c
MD5 9bb393ed497f35d5e3186fdfda6f38c6
SHA1 c223385b706339ba8521b35a860400ae0dc814da
SHA512 3be60b5c5c4c41df75a547eadff3a586109ca8c2fbe0c6bd1ac6b66dbb97ef45afbf1af084d63021956ce3ff28ab15b15092da1d29566e5127c5bacccb1013b0
SSDEEP 6144:UR5hvreDLKVDIb4m1karVNlzxX2Ky8l1rGMgUnbtDEb1vvV:25hDRVPmzBXldTrGSnbNEbxvV
TLSH
T1CD4423C15EA4CC1D6D7CF794469D82A94D20A2D9F614C4419DC6AF2E3048B2EFB2B37B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Game.exe

File Explorer

RGDv1.5.4.zip

.zip 248KB
Game.exe

.exe 471KB
Readme.txt

4KB

RGDv1.5.4.zip

SHA256 4c5496dd4019548564af1bca1a9663e65dc510a63fe41cf92398399117e7ac2c
MD5 9bb393ed497f35d5e3186fdfda6f38c6
SHA1 c223385b706339ba8521b35a860400ae0dc814da
SHA512 3be60b5c5c4c41df75a547eadff3a586109ca8c2fbe0c6bd1ac6b66dbb97ef45afbf1af084d63021956ce3ff28ab15b15092da1d29566e5127c5bacccb1013b0
SSDEEP 6144:UR5hvreDLKVDIb4m1karVNlzxX2Ky8l1rGMgUnbtDEb1vvV:25hDRVPmzBXldTrGSnbNEbxvV
TLSH
T1CD4423C15EA4CC1D6D7CF794469D82A94D20A2D9F614C4419DC6AF2E3048B2EFB2B37B
MD5 SHA1 SHA512 SSDEEP TLSH

Game.exe

IMPHASH 4467d77e1e1d6dbe0620368a2525e955
SHA256 3378b70e423f50c41f1cc73c21938ef5f5e99a9705bc89248c07f7cee2eed344
MD5 7edc1b3bc4979865bbc9b0b6067b033f
SHA1 f8504b3be04d9840e4ca57d2422167e01bf0f9e0
SHA512 5d54ed4c3f29ee70122d4e5b5d3ec95933719d86d9419a3795612b16df0517975bc59332b8572da66392abe0b0cc3a12e1ea98fb1a230c394fb6b9a704b6ddaa
SSDEEP 12288:vDWIT2pztq3wXdUbupYn4jOJEJr9KZRO2DeGcCwa/FIJ8SFfNr:Cdy3O2DqCwa/FIpFr
TLSH
T1DDA48E24BB808332D5A62174CEEA97755D681BF3031912D7BFE426E95E3C2D3B634326
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

203422

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Documents\Tencent Files\377511800\FileRecv\RGSSD3D_Fux2\RGSSD3D_Repo\Game\Game.pdb

kernel32

Sleep GetFileAttributesW GetModuleFileNameW GetPrivateProfileIntW GetStdHandle GetLastError SetCurrentDirectoryW SetConsoleTitleW CreateThread WideCharToMultiByte MultiByteToWideChar lstrlenW lstrcpyW SetEndOfFile GetTimeZoneInformation CreateFileW SetEnvironmentVariableA CompareStringW CreateFileA WriteConsoleW HeapReAlloc IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetStringTypeW GetSystemTimeAsFileTime GetCurrentProcessId GetPrivateProfileStringW GetEnvironmentStringsW FreeEnvironmentStringsW GetModuleFileNameA SetFilePointer IsValidCodePage GetOEMCP GetACP HeapSize FlushFileBuffers CloseHandle GetLocaleInfoW ReadFile GetCurrentThreadId SetLastError TlsFree TlsSetValue TlsGetValue TlsAlloc SetHandleCount HeapCreate IsProcessorFeaturePresent GetConsoleMode GetConsoleCP WriteFile GetFileType InitializeCriticalSectionAndSpinCount ReadConsoleA FreeLibrary AllocConsole WriteProcessMemory DeleteCriticalSection EnterCriticalSection GetProcAddress LeaveCriticalSection ReadProcessMemory LoadLibraryW InitializeCriticalSection QueryPerformanceFrequency GetProcessTimes QueryPerformanceCounter GetTickCount GetCurrentProcess SetStdHandle IsDebuggerPresent SetUnhandledExceptionFilter GetProcessHeap UnhandledExceptionFilter TerminateProcess LCMapStringW HeapAlloc RtlUnwind RaiseException GetCPInfo GetStartupInfoW HeapSetInformation GetCommandLineA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindNextFileW FindFirstFileExW ExitProcess InterlockedIncrement InterlockedDecrement InterlockedExchange EncodePointer DecodePointer HeapFree GetModuleHandleW

user32

MessageBoxW DefWindowProcW GetSystemMetrics RegisterClassW AdjustWindowRectEx CreateWindowExW ShowWindow SetWindowPos GetWindowLongW SetRect LoadIconW UnregisterClassW DestroyWindow DispatchMessageW CopyRect SetWindowTextW SendMessageW InsertMenuW GetMenuItemCount EndDialog ClientToScreen SetCursor LoadCursorW CopyIcon SetCursorPos SetClassLongA ClipCursor GetCursor LoadCursorFromFileA TranslateAcceleratorW MapVirtualKeyW GetSystemMenu SetTimer GetMessageW PostQuitMessage GetKeyNameTextA SetForegroundWindow DialogBoxParamW GetDC TranslateMessage LoadAcceleratorsW PeekMessageW ReleaseDC SetWindowLongW

gdi32

DeleteObject GetTextMetricsW DeleteDC CreateFontIndirectW GetStockObject SelectObject CreateCompatibleDC RemoveFontResourceExW AddFontResourceExW EnumFontFamiliesExW GetGlyphOutlineW

advapi32

RegOpenKeyExW

imm32

ImmDisableIME

d3d9

Direct3DCreate9

d3dx9_43

D3DXCreateSprite D3DXGetImageInfoFromFileW D3DXFillTexture D3DXMatrixMultiply D3DXMatrixTransformation2D D3DXGetImageInfoFromFileInMemory D3DXCreateTextureFromFileInMemoryEx D3DXCreateEffect D3DXSaveTextureToFileW D3DXCreateTexture D3DXCreateTextureFromFileExW

xinput1_3

ord2

gdiplus

GdiplusShutdown GdiplusStartup

wmvcore

WMCreateSyncReader

shlwapi

PathFileExistsW