hack_game.rar
- SHA256 10270ef88ce3faf27a072681064c559e902ef0a90902112a2289622d193f5618
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
hack_game.exe
Resource
win11-20260513-en
windows11-21h2-x64
13 signatures
150 seconds
General
- Target hack_game.rar
- Size 6.0MB
- Sample260818-aesmesscrd
- SHA256 10270ef88ce3faf27a072681064c559e902ef0a90902112a2289622d193f5618
- MD5 a85473c2192e94ffd477b0357325d983
- SHA1 a830c74f2c657648c1fcfa01166e0c3b03c28fde
- SHA512 0cc9906c5bb39e7a91d9e7b04101bde78aad8eb520b3730c740bf0a2f598a01c9f22d3084c0e52e7016695f895630ce9fc0d20ccf158e5e82858d0521319f158
- SSDEEP 196608:8HaXg6EFt5VQ0sKG8AyVSKBuTfKtdAdApk7Ba:iN9F7dsFygKBukAdA4Q
- TLSH T1A456334B7BCFCA8E9444C03E5CDA373112BF66BE9AAC75C097D33349F582019A69644B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/hack_game.exe
File Explorer
-
hack_game.rar.rar 6.0MB
-
hack_game.exe.exe 17.8MB
hack_game.exe
- IMPHASH 43d968be40f606dee2f6b097dbd70b1c
- SHA256 6c15eae0b664116f3e3ba33a336942c1acea16b2b4714194193c557277c21cd3
- MD5 86039eab9066e1fe59b9d774fd40e2e0
- SHA1 c400a3e98e27387de7d314d758a784d9ef28c754
- SHA512 c714b4a64374cf442efff974f3e58abe65f73b4e645ff41f3c295b0c74218f918d82c1145c7b8f9efe54720092e93890f4d6ecd0f06e7a723842fe8b74775faf
- SSDEEP 49152:YWnkxxDGVTagPm0Ii3X4x81LezTv33Fii3VjjJlsvnY0JZcX21zbJA+UsqgaVZ+T:7BR
- TLSH T13E177D269F805B89E6DC0CABC07D2A1B6AF36780D0B3F2CD67926503269FE1C573955C
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
5104
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
PDB paths
advapi32
AllocateAndInitializeSid
CheckTokenMembership
CryptAcquireContextA
CryptCreateHash
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptReleaseContext
FreeSid
dwmapi
DwmSetWindowAttribute
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontW
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
RoundRect
SelectObject
SetBkMode
SetTextColor
kernel32
BaseGetNamedObjectDirectory
CreateDirectoryA
CreateThread
DeleteCriticalSection
EncodePointer
EnterCriticalSection
ExitThread
FormatMessageA
FormatMessageW
GetCurrentProcessId
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleExW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetThreadPriority
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
LeaveCriticalSection
LocalFree
QueryPerformanceFrequency
QueryUnbiasedInterruptTime
RaiseException
RaiseFailFastException
RtlCaptureContext
RtlLookupFunctionEntry
RtlUnwindEx
RtlVirtualUnwind
SetConsoleCtrlHandler
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SwitchToThread
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
VirtualProtect
VirtualQuery
api-ms-win-crt-convert-l1-1-0
btowc
mbrtowc
strtoul
wcrtomb
wctob
api-ms-win-crt-environment-l1-1-0
__p__environ
getenv
api-ms-win-crt-filesystem-l1-1-0
_fstat64
api-ms-win-crt-heap-l1-1-0
_set_new_mode
calloc
free
malloc
realloc
api-ms-win-crt-locale-l1-1-0
___mb_cur_max_func
_configthreadlocale
localeconv
setlocale
api-ms-win-crt-math-l1-1-0
__setusermatherr
_fdopen
api-ms-win-crt-private-l1-1-0
__C_specific_handler
memchr
memcmp
memcpy
memmove
strchr
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
_cexit
_configure_narrow_argv
_errno
_exit
_initialize_narrow_environment
_set_app_type
_initterm
_initterm_e
_set_invalid_parameter_handler
abort
signal
strerror
system
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vsprintf
_fileno
_get_osfhandle
_lseeki64
_read
_wfopen
_write
fclose
fflush
fopen
fputc
fputs
fwrite
setvbuf
api-ms-win-crt-string-l1-1-0
isalnum
iswctype
memset
strcmp
strcoll
strlen
strncmp
strnlen
strxfrm
towlower
towupper
wcscoll
wcslen
wcsnlen
wcsxfrm
wctype
api-ms-win-crt-time-l1-1-0
strftime
wcsftime
api-ms-win-crt-utility-l1-1-0
rand_s
ntdll
NtClose
NtCreateSection
NtDelayExecution
NtDuplicateObject
NtMapViewOfSection
NtRaiseHardError
NtReleaseKeyedEvent
NtUnmapViewOfSection
NtWaitForKeyedEvent
NtWaitForSingleObject
RtlDllShutdownInProgress
RtlNtStatusToDosError
shell32
ShellExecuteA
user32
BeginPaint
CreateWindowExW
DefWindowProcA
DestroyWindow
DispatchMessageA
DrawTextW
EndPaint
FillRect
GetClientRect
GetMessageA
GetSystemMetrics
InvalidateRect
KillTimer
LoadCursorA
MessageBoxA
MessageBoxW
PostQuitMessage
RegisterClassW
ReleaseCapture
SendMessageA
SetCapture
SetTimer
ShowWindow
TranslateMessage
Name
.text
Size
805KB
Virtual Size
804KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.data
Size
8KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rdata
Size
16.9MB
Virtual Size
16.9MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.pdata
Size
46KB
Virtual Size
46KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
64KB
Virtual Size
63KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bss
Size
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
16B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
6KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
9KB
Virtual Size
8KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ