Black_Myth_Wukong_v1[.]0-v1[.]0[.]20_Plus_44_Trainer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Black_Myth_Wukong_v1.0-v1.0.20_Plus_44_Trainer.exe
Size 1.6MB
Sample260820-xag2fstclc
SHA256 e81321810a9f5058ed73edce827453442d603ca89a2de4939ce55b83e7d7ff63
MD5 b788ee0518252ef53f13eba172171260
SHA1 b7592b61cd56e53929badd3d8bead4eecd29aead
SHA512 3edab475f3d7cc4b68a77f7f805a5d6fd09783902a7e1c35236af1ea17ff1763bbcd49014283503fd2853d7c6fc7d377ecd6c80290f28717d4a8d1748fc970a7
SSDEEP 24576:E/XIZL4hnTF7W6o1Q9Jv6/x8n2arXKz7mWcAOUaP/st+HLnEQs:E/XIZL49J76YJvU8bDQ7mqZ+3HrRs
TLSH
T1C675AE16A7D801BDE0B7C1B9CE568942E772780A07719BDF07D096662F67BE04E3E312
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Black_Myth_Wukong_v1.0-v1.0.20_Plus_44_Trainer.exe

File Explorer

Black_Myth_Wukong_v1.0-v1.0.20_Plus_44_Trainer.exe

.exe 1.6MB

Black_Myth_Wukong_v1.0-v1.0.20_Plus_44_Trainer.exe

IMPHASH 9fa16f4409bf3d489764a9caf8fc24fc
SHA256 e81321810a9f5058ed73edce827453442d603ca89a2de4939ce55b83e7d7ff63
MD5 b788ee0518252ef53f13eba172171260
SHA1 b7592b61cd56e53929badd3d8bead4eecd29aead
SHA512 3edab475f3d7cc4b68a77f7f805a5d6fd09783902a7e1c35236af1ea17ff1763bbcd49014283503fd2853d7c6fc7d377ecd6c80290f28717d4a8d1748fc970a7
SSDEEP 24576:E/XIZL4hnTF7W6o1Q9Jv6/x8n2arXKz7mWcAOUaP/st+HLnEQs:E/XIZL49J76YJvU8bDQ7mqZ+3HrRs
TLSH
T1C675AE16A7D801BDE0B7C1B9CE568942E772780A07719BDF07D096662F67BE04E3E312
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

637700

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

WideCharToMultiByte MultiByteToWideChar UnmapViewOfFile CreateFileMappingW MapViewOfFile Sleep GetCurrentProcessId LoadLibraryW GetProcAddress GetModuleHandleA LoadLibraryA InitializeCriticalSectionEx DeleteCriticalSection GetModuleHandleW DecodePointer GetModuleFileNameW HeapAlloc HeapFree HeapReAlloc HeapSize GetProcessHeap GetTempPathW WaitNamedPipeW ReadFile WritePrivateProfileStringW GetCurrentProcess FindResourceW LoadResource SizeofResource LockResource LoadLibraryExW GetFileAttributesW FreeLibrary GetProcessTimes GetSystemTimeAsFileTime IsWow64Process SetLastError ResumeThread WaitForSingleObject GetFileSizeEx LocalFree CreateDirectoryW LCMapStringW SetEndOfFile WriteConsoleW SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW WriteFile CreateFileW GetLastError GetPrivateProfileStringW CloseHandle GetCommandLineA GetOEMCP GetACP IsValidCodePage EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW FlsFree FlsSetValue FlsGetValue FlsAlloc ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers FormatMessageA GetLocaleInfoEx GetStringTypeW ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive GetCurrentThreadId FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetFileInformationByHandleEx QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObjectEx GetExitCodeThread EnterCriticalSection LeaveCriticalSection EncodePointer CompareStringEx GetCPInfo LCMapStringEx WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead OutputDebugStringW RaiseException RtlUnwindEx RtlPcToFileHeader InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetStdHandle GetFileType SetFilePointerEx RtlUnwind

user32

MessageBoxA SetProcessDPIAware MessageBoxW

advapi32

SetEntriesInAclW ConvertStringSidToSidW GetNamedSecurityInfoW SetNamedSecurityInfoW

shell32

SHGetFolderPathW

ole32

CoInitializeEx CoUninitialize

oleaut32

SysFreeString SysAllocString VariantInit SafeArrayUnaccessData SafeArrayAccessData SafeArrayCreate

mscoree

CorBindToRuntime CLRCreateInstance

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

winmm

PlaySoundW