Ages of Conflict[.]exe

General

Target
Ages of Conflict.exe
Size 652KB
Sample260810-e585baea97
SHA256 c3b20b8801df097f0ace05644343213dcaae445a7b7274e64cf398eb5455072f
MD5 8e8f63b07661d82b816a7ce8e41d331d
SHA1 97e0351c1e6e07c94d787ba969b475034a82bd83
SHA512 53e95bbd6eaae0bdec80df98e77dc3b107f5815f697aa108f8631b1ce00c8b1b8220a30f901761810af1865831fcb7035a5d987e1c59be9367fec6ef8312ae20
SSDEEP 3072:O0wazAjvuMeUwZPRyYzK4UHcUIcLh2teMKg:OPaMjvuUwZplUhLhx
TLSH
T132E4409E6399C25EE16223306A11D33057B49ED87130D28A07EE7E937F6A5878D381FD
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Ages of Conflict.exe

File Explorer

Ages of Conflict.exe

.exe 652KB

Ages of Conflict.exe

IMPHASH a136217cdd3247ff6a8766561064ca0b
SHA256 c3b20b8801df097f0ace05644343213dcaae445a7b7274e64cf398eb5455072f
MD5 8e8f63b07661d82b816a7ce8e41d331d
SHA1 97e0351c1e6e07c94d787ba969b475034a82bd83
SHA512 53e95bbd6eaae0bdec80df98e77dc3b107f5815f697aa108f8631b1ce00c8b1b8220a30f901761810af1865831fcb7035a5d987e1c59be9367fec6ef8312ae20
SSDEEP 3072:O0wazAjvuMeUwZPRyYzK4UHcUIcLh2teMKg:OPaMjvuUwZplUhLhx
TLSH
T132E4409E6399C25EE16223306A11D33057B49ED87130D28A07EE7E937F6A5878D381FD
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4708

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_m_r\WindowsPlayer_player_Master_mono_x64.pdb

unityplayer

UnityMain2

kernel32

HeapAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW CloseHandle RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Resubmissions

Sharing