Shattered Pixel Dungeon[.]exe

General

Target
Shattered Pixel Dungeon.exe
Size 429KB
Sample260910-csbxyaterf
SHA256 6bb445905386599132b6d9becb9ace375830a7c8103009d1238cb1349fd27854
MD5 9341ecb1f36bc28e48eafe8e47f8031e
SHA1 62884b7fbdbeccfc585c2cfa7846d7dcf97ef408
SHA512 f39e2e986366fb8864b0ddf9e7ed3e39b4589b564606748d6d7f8a40231d11f16820da4ba1a662919fe2d05b89b124d8bd092c6b34c9d6f873195c60be28ffab
SSDEEP 6144:rTZpx1b7qWLmJ9NvUATvOLjsJ3jRh4kUbCoCCbV3V3LwpcI4:rTZp3jCHUCvOkJ8k0rBapcz
TLSH
T124947C1AE7A804F8E0E7D278C9575906E7B67C5E0771D78F03E846662F232A09D3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Shattered Pixel Dungeon.exe

File Explorer

Shattered Pixel Dungeon.exe

.exe 429KB

Shattered Pixel Dungeon.exe

IMPHASH ef9c750575c6c61b4e909d34c193c9e1
SHA256 6bb445905386599132b6d9becb9ace375830a7c8103009d1238cb1349fd27854
MD5 9341ecb1f36bc28e48eafe8e47f8031e
SHA1 62884b7fbdbeccfc585c2cfa7846d7dcf97ef408
SHA512 f39e2e986366fb8864b0ddf9e7ed3e39b4589b564606748d6d7f8a40231d11f16820da4ba1a662919fe2d05b89b124d8bd092c6b34c9d6f873195c60be28ffab
SSDEEP 6144:rTZpx1b7qWLmJ9NvUATvOLjsJ3jRh4kUbCoCCbV3V3LwpcI4:rTZp3jCHUCvOkJ8k0rBapcz
TLSH
T124947C1AE7A804F8E0E7D278C9575906E7B67C5E0771D78F03E846662F232A09D3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Password

pouzilla1#

Minor OS version

0

Major OS version

6

Entry point

134224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

jpackageapplauncherw.pdb

user32

GetMessageW AllowSetForegroundWindow CreateWindowExW PostMessageW DispatchMessageW TranslateMessage MessageBoxW

shell32

CommandLineToArgvW

kernel32

GetModuleFileNameW SetEndOfFile WriteConsoleW HeapSize SetStdHandle GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindFirstFileExW HeapReAlloc GetCurrentDirectoryW ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetFileType EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW VirtualProtect FlsFree FlsSetValue CloseHandle GetLastError WaitForSingleObject GetExitCodeProcess ResumeThread CreateProcessW GetProcessId AssignProcessToJobObject SetEnvironmentVariableW LoadLibraryExW GetCurrentProcessId GetCurrentThreadId GetLocalTime AllocConsole AttachConsole FreeLibrary GetModuleHandleExW GetProcAddress LoadLibraryW LocalFree FormatMessageW CreateFileW FindClose FindNextFileW GetFileAttributesW SetLastError CreateThread CreateJobObjectW SetInformationJobObject GetModuleHandleW SetDllDirectoryW GetCommandLineW GetEnvironmentVariableW GetSystemDirectoryW RtlUnwind MultiByteToWideChar WideCharToMultiByte GetStringTypeW EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetCPInfo RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead FlsGetValue RtlPcToFileHeader RaiseException RtlUnwindEx InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetFullPathNameW GetDriveTypeW ExitProcess GetStdHandle WriteFile HeapFree HeapAlloc FlsAlloc

Name

.text

Size

287KB

Virtual Size

287KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

93KB

Virtual Size

92KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

Shattered Pixel Dungeon.exe

user32

shell32

kernel32

generic