Hacker_Simulator[.]exe

General

Target
Hacker_Simulator.exe
Size 185KB
Sample260808-e59e3sbg45
SHA256 40d718217e52b4eac4d154771bb567acb380e4915e62e39004dbbf2d032a5d30
MD5 4281a7764e35febf1c2ec9457c736d18
SHA1 8b150f168401db8257f698b12a0ff02eac43570b
SHA512 850f16f0361f86f47a72e5fa98f04dd9ff433e02247162f0a4e884641927b824bb5b2b33b93c0f729fee93d977f3c4dccf74df9f74f870d416d8a0068eb738af
SSDEEP 3072:tfTeUvrWnIBg1R3Ekmh6S415q7v0DOTb90aebbd5cQClGX7N:9RMqW3ER6S4+EKbJkulGR
TLSH
T1D9047D2367BCB9F4E166817484215B08E77ABC310279AF2F066436A61F773D29D36B13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Hacker_Simulator.exe

File Explorer

Hacker_Simulator.exe

.exe 185KB

Hacker_Simulator.exe

IMPHASH 70e5066fac5169ee779903c2061404de
SHA256 40d718217e52b4eac4d154771bb567acb380e4915e62e39004dbbf2d032a5d30
MD5 4281a7764e35febf1c2ec9457c736d18
SHA1 8b150f168401db8257f698b12a0ff02eac43570b
SHA512 850f16f0361f86f47a72e5fa98f04dd9ff433e02247162f0a4e884641927b824bb5b2b33b93c0f729fee93d977f3c4dccf74df9f74f870d416d8a0068eb738af
SSDEEP 3072:tfTeUvrWnIBg1R3Ekmh6S415q7v0DOTb90aebbd5cQClGX7N:9RMqW3ER6S4+EKbJkulGR
TLSH
T1D9047D2367BCB9F4E166817484215B08E77ABC310279AF2F066436A61F773D29D36B13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

kepler

Minor OS version

0

Major OS version

6

Entry point

6892

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

BootstrapPackagedGame-Win64-Shipping.pdb

kernel32

GetFileAttributesW CloseHandle GetLastError WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleFileNameW LoadResource LockResource SizeofResource FindResourceW LoadLibraryW WriteConsoleW CreateFileW GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW LCMapStringW GetProcessHeap

user32

wsprintfW MessageBoxW

shell32

ShellExecuteExW

shlwapi

PathCombineW PathRemoveFileSpecW PathCanonicalizeW

Name

.text

Size

61KB

Virtual Size

61KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

41KB

Virtual Size

41KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

71KB

Virtual Size

71KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Hacker_Simulator.exe

kernel32

user32

shell32

shlwapi

generic