CityGameStudio64[.]exe

Resubmissions

08/08/2026, 16:27

260808-tx48qazhqa

08/08/2026, 16:25

260808-twxggsaj3s3

Sharing

Copy URL Twitter E-mail

General

Target
CityGameStudio64.exe
Size 16.2MB
Sample260808-tx48qazhqa
SHA256 88368cab95ca20a5b4d7b5abc8b148ad24d4aae73b3fb5da78eb96efdcf48a30
MD5 d68e2e47895dac1e681414bd5e0ef390
SHA1 11e036c8a5d27f352c788e273fda0ce5a8b9355c
SHA512 0b22fd76f08e9ff308cb2d3a85e932d0e43d0b6181520ebff7eefdd3c9c4579ea00d5686cdb840fd86b6ff96c26e7d9996fe76ebea771be5959d46de3f61980f
SSDEEP 196608:0qZP4BUtTyO/YC5pfP7M1B3Pk3FnVLrQkXK8xyiwaKYOp6yI:X7/YCPX7DK7fd6l
TLSH
T1EA077B41B2E442D5C476E03DAA57A41BF371785447309BD717B20A6AAF63AF08EBFB01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CityGameStudio64.exe

File Explorer

CityGameStudio64.exe

.exe 16.2MB

CityGameStudio64.exe

IMPHASH 4095597d65ebcdcb5fe01d91b0558b1b
SHA256 88368cab95ca20a5b4d7b5abc8b148ad24d4aae73b3fb5da78eb96efdcf48a30
MD5 d68e2e47895dac1e681414bd5e0ef390
SHA1 11e036c8a5d27f352c788e273fda0ce5a8b9355c
SHA512 0b22fd76f08e9ff308cb2d3a85e932d0e43d0b6181520ebff7eefdd3c9c4579ea00d5686cdb840fd86b6ff96c26e7d9996fe76ebea771be5959d46de3f61980f
SSDEEP 196608:0qZP4BUtTyO/YC5pfP7M1B3Pk3FnVLrQkXK8xyiwaKYOp6yI:X7/YCPX7DK7fd6l
TLSH
T1EA077B41B2E442D5C476E03DAA57A41BF371785447309BD717B20A6AAF63AF08EBFB01
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12732004

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

winmm

timeEndPeriod timeGetTime timeBeginPeriod

opengl32

glViewport glTexParameteri glTexParameterf glTexImage2D glScissor glReadPixels glReadBuffer glPolygonMode glPixelStorei glLineWidth glGetString glGetIntegerv glGetFloatv glGenTextures glFrontFace glFlush glEnable glDrawElements glDrawBuffer glDrawArrays glDisable glDepthMask glDepthFunc glDeleteTextures glCullFace glCopyTexSubImage2D glColorMask glClearDepth glClearColor glClear glBlendFunc glBindTexture wglMakeCurrent wglGetProcAddress wglDeleteContext wglCreateContext wglGetCurrentDC glTexSubImage2D

kernel32

LoadLibraryW SystemTimeToFileTime GetTimeZoneInformation MultiByteToWideChar GetUserDefaultUILanguage GetConsoleScreenBufferInfo SetConsoleTextAttribute LoadLibraryA GetProcessHeap GetFullPathNameW SetFilePointerEx ReadConsoleW GetConsoleCP FlushFileBuffers CreatePipe GetFileAttributesExW GetExitCodeProcess EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetACP GetCommandLineA GetModuleFileNameA HeapReAlloc HeapFree HeapAlloc FreeLibraryAndExitThread ExitThread GetProcAddress DeleteFileW RemoveDirectoryW SetConsoleMode ReadConsoleInputA GlobalUnlock FileTimeToSystemTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetDriveTypeW CreateFileW SetConsoleCtrlHandler GetModuleHandleExW ReadFile SetStdHandle SetEnvironmentVariableW SetEnvironmentVariableA DuplicateHandle WideCharToMultiByte RaiseException RtlUnwindEx RtlPcToFileHeader GetStartupInfoW GetStdHandle GetModuleHandleA GetModuleFileNameW FreeLibrary GetLocalTime GetSystemTime CreateProcessW TerminateProcess Sleep WaitForSingleObject QueryPerformanceFrequency QueryPerformanceCounter SetLastError GetLastError GetEnvironmentVariableW LocalFree GlobalAlloc GetCommandLineW IsDebuggerPresent InitializeSListHead GetConsoleMode GlobalLock MoveFileExW IsProcessorFeaturePresent GetCurrentProcess SetUnhandledExceptionFilter SetEndOfFile WriteConsoleW HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP IsValidCodePage FindFirstFileExA UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext GetCPInfo GetStringTypeW GetLocaleInfoW CreateEventW TlsAlloc LCMapStringW CompareStringW InitializeCriticalSectionAndSpinCount DecodePointer EncodePointer ExitProcess SetThreadPriority ResetEvent SetEvent CreateEventA CreateThread CreateSemaphoreA WaitForSingleObjectEx ReleaseSemaphore DeleteCriticalSection TryEnterCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection ReplaceFileW GetLogicalDrives GetFileAttributesW GetDiskFreeSpaceExA FindNextFileW FindFirstFileExW CreateDirectoryW GetCurrentDirectoryW SetCurrentDirectoryW FlushConsoleInputBuffer GlobalMemoryStatus GetTickCount GetCurrentProcessId GetModuleHandleW CloseHandle FindNextFileA TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetFileType WriteFile GetCurrentThreadId FindClose GetSystemTimeAsFileTime

user32

GetUserObjectInformationW GetDesktopWindow GetProcessWindowStation GetDC MessageBoxA GetRawInputDeviceList GetRawInputDeviceInfoA EnumDisplayMonitors MonitorFromWindow EnumDisplaySettingsA CreateIconIndirect CreateIconFromResource DestroyIcon LoadIconA LoadCursorA SetWindowLongPtrA GetWindowLongPtrA ScreenToClient ClientToScreen ClipCursor GetCursorPos SetCursor SetCursorPos MessageBoxW AdjustWindowRectEx GetWindowRect GetClientRect SetWindowTextW ReleaseDC AllowSetForegroundWindow SetForegroundWindow GetSystemMetrics KillTimer SetTimer ReleaseCapture SetCapture SetFocus IsClipboardFormatAvailable EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard SetWindowPos MoveWindow FlashWindowEx ShowWindow CreateWindowExW RegisterClassExW CallWindowProcW DefWindowProcW SendMessageA PeekMessageW DispatchMessageW TranslateMessage TrackMouseEvent GetKeyboardLayoutNameA

gdi32

ChoosePixelFormat GetObjectA SetTextColor SetBkColor SelectObject GetDeviceCaps DeleteObject DeleteDC CreateCompatibleDC CreateCompatibleBitmap CreateBitmap BitBlt SwapBuffers SetPixelFormat

wsock32

connect WSAGetLastError sendto recvfrom WSACleanup __WSAFDIsSet accept bind closesocket recv socket setsockopt select ntohs listen htons inet_ntoa shutdown WSASetLastError send WSAStartup

shell32

CommandLineToArgvW DragQueryFileW SHGetFolderPathW SHFileOperationA ShellExecuteW DragAcceptFiles

dinput8

DirectInput8Create

dsound

ord6 ord7 ord2 ord1

ole32

CoUninitialize CoInitialize CoCreateInstance

iphlpapi

GetAdaptersAddresses

shlwapi

PathFileExistsW

ws2_32

getaddrinfo freeaddrinfo

advapi32

RegisterEventSourceA ReportEventA DeregisterEventSource

steam_api64

SteamAPI_Init SteamAPI_IsSteamRunning SteamAPI_RegisterCallResult SteamAPI_UnregisterCallResult SteamAPI_RunCallbacks SteamAPI_UnregisterCallback SteamAPI_RegisterCallback SteamAPI_GetHSteamUser SteamInternal_FindOrCreateUserInterface SteamInternal_ContextInit SteamAPI_RestartAppIfNecessary

discord-rpc

Discord_Shutdown Discord_RunCallbacks Discord_UpdatePresence Discord_Respond Discord_ClearPresence Discord_Initialize

Name

.text

Size

12.3MB

Virtual Size

12.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.8MB

Virtual Size

2.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

372KB

Virtual Size

486KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

519KB

Virtual Size

518KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

496B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

6KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

84KB

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

104KB

Virtual Size

104KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

CityGameStudio64.exe

winmm

opengl32

kernel32

user32

gdi32

wsock32

shell32

dinput8

dsound

ole32

iphlpapi

shlwapi

ws2_32

advapi32

steam_api64

discord-rpc

generic