ProjectZomboid64[.]exe

General

Target
ProjectZomboid64.exe
Size 967KB
Sample260803-ngrd2agf72
SHA256 32cca5b5e9e4ac5dcfda34e8aa95bed1f721fa72b13fb8793c5e22eff6197b24
MD5 a1beb417163f8bcf9ae279621b541f37
SHA1 81ce0d550431456c92ea587642f6ffc4ea8e62bb
SHA512 1a14caf9fb908d30e63e39993b7fb47f817f76baba98b289d01c5e39ace829bafd00764409e8c11fac637d4517f5734f48eaff85e9fb03177e4c34ff3f01de20
SSDEEP 12288:7PLtNYxprjaXdDT/Ps9C1z9Jvyap03nUOa62CXAsgngd3KVfT93YC5:DLt6xprONoaJCNXXAsj3KZT9oO
TLSH
T16A258CD967F284E6E021473CAE1DF92099276F680E24CE972EB036DD6F77550E936302
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ProjectZomboid64.exe

File Explorer

ProjectZomboid64.exe

.exe 967KB

ProjectZomboid64.exe

IMPHASH b92ea98eb7cb322a7ddd7d112f8ccb61
SHA256 32cca5b5e9e4ac5dcfda34e8aa95bed1f721fa72b13fb8793c5e22eff6197b24
MD5 a1beb417163f8bcf9ae279621b541f37
SHA1 81ce0d550431456c92ea587642f6ffc4ea8e62bb
SHA512 1a14caf9fb908d30e63e39993b7fb47f817f76baba98b289d01c5e39ace829bafd00764409e8c11fac637d4517f5734f48eaff85e9fb03177e4c34ff3f01de20
SSDEEP 12288:7PLtNYxprjaXdDT/Ps9C1z9Jvyap03nUOa62CXAsgngd3KVfT93YC5:DLt6xprONoaJCNXXAsj3KZT9oO
TLSH
T16A258CD967F284E6E021473CAE1DF92099276F680E24CE972EB036DD6F77550E936302
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

55304

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

steam_api64

SteamInternal_ContextInit SteamInternal_SteamAPI_Init SteamAPI_IsSteamRunning SteamAPI_RestartAppIfNecessary SteamAPI_Shutdown SteamInternal_FindOrCreateUserInterface SteamAPI_GetHSteamUser

kernel32

TlsAlloc SetEndOfFile WriteConsoleW HeapSize CreateFileW SetStdHandle GetProcessHeap VerSetConditionMask GetModuleHandleW GetProcAddress LoadLibraryA VerifyVersionInfoW GetCommandLineW GetModuleFileNameW LocalFree WideCharToMultiByte FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetCurrentProcess TerminateProcess QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlUnwindEx GetLastError SetLastError InitializeCriticalSectionAndSpinCount RtlUnwind TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW SetEnvironmentVariableW GetStdHandle WriteFile HeapFree HeapAlloc FlsAlloc FlsGetValue FlsSetValue FlsFree CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType CloseHandle FlushFileBuffers GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage

user32

MessageBoxA

shell32

CommandLineToArgvW

Sharing