d2269f20bb4c553d660e8d0607016eb1fd4571fad3936dfad38df458d27a6fdd

Sharing

Copy URL Twitter E-mail

General

Target
d2269f20bb4c553d660e8d0607016eb1fd4571fad3936dfad38df458d27a6fdd
Size 7.8MB
Sample260916-mk9jcaal21
SHA256 d2269f20bb4c553d660e8d0607016eb1fd4571fad3936dfad38df458d27a6fdd
MD5 bbb75d2a16408014a55ae98b24b6da5f
SHA1 f9283ca673d6756ba77e87f981709f7c103222ef
SHA512 c84ce874b9a9de25eeb35d6cb47e8b0efb527174f5d6526e9cbd20a247102bb8947b60cc72a80b2286c3bfd33994ad106d516468c12d587a65846f0ac6926c20
SSDEEP 98304:e5xv3YZWs+vk3MgxUCfZlmetGNLMpUrx04I:u3YZ3+wqCRBtGNL4ExO
TLSH
T14C869E9AB2A951C4E177D07D8AD7971BEAB13C04833096CF069056AE2F33BE56C77720
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d2269f20bb4c553d660e8d0607016eb1fd4571fad3936dfad38df458d27a6fdd

File Explorer

d2269f20bb4c553d660e8d0607016eb1fd4571fad3936dfad38df458d27a6fdd

.exe 7.8MB

d2269f20bb4c553d660e8d0607016eb1fd4571fad3936dfad38df458d27a6fdd

IMPHASH 4f85f784e372e73d205675c77629b5a7
SHA256 d2269f20bb4c553d660e8d0607016eb1fd4571fad3936dfad38df458d27a6fdd
MD5 bbb75d2a16408014a55ae98b24b6da5f
SHA1 f9283ca673d6756ba77e87f981709f7c103222ef
SHA512 c84ce874b9a9de25eeb35d6cb47e8b0efb527174f5d6526e9cbd20a247102bb8947b60cc72a80b2286c3bfd33994ad106d516468c12d587a65846f0ac6926c20
SSDEEP 98304:e5xv3YZWs+vk3MgxUCfZlmetGNLMpUrx04I:u3YZ3+wqCRBtGNL4ExO
TLSH
T14C869E9AB2A951C4E177D07D8AD7971BEAB13C04833096CF069056AE2F33BE56C77720
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3037911

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\Admin\Documents\pvz-hd-ultimate\build\ReleaseGOTY_x64\bin\PlantsVsZombies.pdb

kernel32

GetSystemDirectoryA MulDiv FileTimeToSystemTime DeleteFileA OutputDebugStringA GetLastError SetErrorMode GetCurrentProcess GetCurrentThread SetThreadPriority GetThreadPriority GetVersionExA VirtualProtect VirtualQuery IsBadWritePtr GetWindowsDirectoryA GetCommandLineA CreateMutexA SetUnhandledExceptionFilter UnmapViewOfFile GetCurrentThreadId GetFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive WriteConsoleW SetEndOfFile HeapSize RemoveDirectoryW OutputDebugStringW SetConsoleCtrlHandler GetProcessHeap FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW CreateDirectoryW HeapReAlloc SetStdHandle GetTimeZoneInformation GetFileSizeEx SetFilePointerEx ReadConsoleW CreateEventA GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW LoadLibraryExW IsThreadAFiber GetTempPathW HeapAlloc HeapFree UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext IsProcessorFeaturePresent GetCurrentDirectoryW SetCurrentDirectoryW SetEnvironmentVariableW WriteFile GetStdHandle GetModuleFileNameW GetFullPathNameW GetLocalTime SystemTimeToTzSpecificLocalTime PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW CreateFileW FreeLibraryAndExitThread ResumeThread ExitThread CreateThread GetModuleHandleExW TerminateProcess ExitProcess ReadFile RtlUnwind FlsFree FlsSetValue FlsGetValue FlsAlloc SetLastError InterlockedFlushSList InterlockedPushEntrySList WaitForSingleObject DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection CloseHandle GetFileSize FindNextFileA FindFirstFileA FindClose CreateFileA FindResourceA SizeofResource LockResource LoadResource GetModuleHandleA Sleep GetFileAttributesExA LoadLibraryA GetProcAddress FreeLibrary GetModuleFileNameA QueryPerformanceFrequency QueryPerformanceCounter CreateFileMappingA MapViewOfFile GetCurrentProcessId GetTickCount WideCharToMultiByte MultiByteToWideChar GlobalFree GlobalLock GlobalUnlock GetConsoleMode RaiseException RtlPcToFileHeader RtlUnwindEx RtlLookupFunctionEntry GetCPInfo CompareStringEx WakeAllConditionVariable SleepConditionVariableSRW GetStringTypeW LCMapStringEx DecodePointer EncodePointer GetLocaleInfoEx LocalFree InitializeCriticalSectionEx WakeConditionVariable FormatMessageA TryAcquireSRWLockExclusive GetLogicalProcessorInformationEx GetExitCodeThread SwitchToThread WaitForSingleObjectEx GetSystemTimePreciseAsFileTime InitializeSListHead GetSystemTimeAsFileTime GetModuleHandleW GetStartupInfoW GlobalAlloc

user32

GetClipboardData EmptyClipboard GetMessagePos SendMessageA LoadCursorA PostMessageA CreateWindowExW PostThreadMessageA IsWindow RegisterClipboardFormatA GetActiveWindow CloseClipboard MessageBoxA GetSystemMetrics DrawTextExA GetDC ReleaseDC GetClientRect ClientToScreen FillRect OffsetRect GetMessageA DestroyWindow ShowWindow SetClipboardData SetTimer SetWindowTextA GetWindowTextA AdjustWindowRect MessageBoxW SetCursor GetSysColorBrush LoadIconA RegisterWindowMessageA PeekMessageA IsChild MoveWindow GetWindowPlacement IsWindowVisible IsIconic DialogBoxIndirectParamA EndDialog GetDlgItem SetCapture ReleaseCapture SetForegroundWindow BeginPaint EndPaint GetWindowRect TranslateMessage DispatchMessageA DefWindowProcA RegisterClassA OpenClipboard SetFocus EnumDisplaySettingsA GetCursorPos SetCaretPos ShowCaret HideCaret DestroyCaret CreateCaret GetCursor SystemParametersInfoA ScreenToClient ChangeDisplaySettingsA DestroyCursor GetClassNameA EnumWindows EnumChildWindows SetParent SetWindowLongPtrA GetWindowLongPtrA SetWindowLongA WindowFromPoint MapWindowPoints CreateWindowExA

gdi32

CreateCompatibleDC SelectClipRgn CreateRectRgn GetTextExtentPoint32A CreateSolidBrush GdiFlush TextOutA GetObjectA CreateDIBSection GetTextMetricsA SetTextColor StretchBlt SetBkMode SelectObject Rectangle IntersectClipRect GetStockObject GetDeviceCaps DeleteObject DeleteDC CreateFontA CreateFontIndirectA BitBlt

advapi32

RegDeleteKeyA RegOpenKeyExA RegOpenKeyA RegEnumKeyA RegDeleteValueA RegCloseKey RegSetValueExA RegQueryValueExA RegCreateKeyExA

shell32

ShellExecuteA ShellExecuteW

ole32

CoCreateInstance CoInitialize

oleaut32

VariantInit VariantClear VariantChangeType SetErrorInfo GetErrorInfo SysAllocString SysFreeString CreateErrorInfo

winmm

PlaySoundA timeGetTime timeBeginPeriod timeEndPeriod mixerGetDevCapsA mixerOpen mixerClose mixerGetLineInfoA mixerGetLineControlsA mixerGetControlDetailsA mixerSetControlDetails

ws2_32

__WSAFDIsSet closesocket connect ioctlsocket htons inet_addr recv select send socket gethostbyname WSAStartup WSACleanup WSAGetLastError

avcodec-62

av_packet_alloc av_packet_unref avcodec_alloc_context3 avcodec_open2 avcodec_parameters_to_context avcodec_receive_frame avcodec_send_packet

avformat-62

av_find_best_stream av_read_frame avformat_open_input

avutil-60

av_frame_alloc

shlwapi

PathRemoveFileSpecA

sdl3

SDL_GetWindowProperties SDL_RenderFillRect SDL_RenderRect SDL_RenderLine SDL_SetRenderDrawBlendMode SDL_CreateSurfaceFrom SDL_SetTextureAlphaMod SDL_SetTextureColorMod SDL_CreateTextureFromSurface SDL_GetKeyName SDL_Delay SDL_GetTicksNS SDL_SetRenderVSync SDL_DestroyRenderer SDL_RenderPresent SDL_GetRendererName SDL_SavePNG SDL_free SDL_GetPointerProperty SDL_SetClipboardText SDL_GetClipboardText SDL_GetCurrentVideoDriver SDL_GetWindowID SDL_RenderGeometry SDL_GetWindowFlags SDL_GetWindowPosition SDL_GetWindowSize SDL_GetWindowSizeInPixels SDL_GetGamepads SDL_OpenGamepad SDL_GetGamepadAxis SDL_GetGamepadButton SDL_CloseGamepad SDL_GetKeyboardFocus SDL_StartTextInput SDL_TextInputActive SDL_StopTextInput SDL_SetTextInputArea SDL_GetMouseFocus SDL_GetGlobalMouseState SDL_WarpMouseInWindow SDL_GetWindowRelativeMouseMode SDL_CaptureMouse SDL_CreateSystemCursor SDL_SetCursor SDL_DestroyCursor SDL_ShowCursor SDL_HideCursor SDL_SetHint SDL_OpenURL SDL_GetPerformanceCounter SDL_GetPerformanceFrequency SDL_GetVersion SDL_CreateTexture SDL_SetTextureBlendMode SDL_SetTextureScaleMode SDL_UpdateTexture SDL_SetRenderViewport SDL_GetRenderViewport SDL_RenderViewportSet SDL_SetRenderClipRect SDL_GetRenderClipRect SDL_RenderClipEnabled SDL_GetRenderScale SDL_RenderGeometryRaw SDL_DestroyTexture SDL_GetPrimaryDisplay SDL_GetCurrentDisplayMode SDL_SetRenderTextureAddressMode SDL_DestroySurface SDL_SetRenderTarget SDL_GetRenderTarget SDL_SetRenderDrawColor SDL_RenderClear SDL_RenderReadPixels SDL_IOFromConstMem SDL_PutAudioStreamPlanarData SDL_ResumeAudioStreamDevice SDL_OpenAudioDeviceStream SDL_CreateSurface SDL_UnlockSurface SDL_LoadBMP_IO SDL_GetDisplayContentScale SDL_CreateWindow SDL_RaiseWindow SDL_SetWindowFullscreen SDL_DestroyWindow SDL_CreateColorCursor SDL_GetDefaultCursor SDL_PollEvent SDL_GetBasePath SDL_Init SDL_Quit SDL_CreateRenderer SDL_UpdateYUVTexture SDL_SetRenderLogicalPresentation SDL_ConvertEventToRenderCoordinates SDL_RenderTexture SDL_RenderTextureRotated

sdl3_ttf

TTF_OpenFont TTF_SetFontStyle TTF_SetFontHinting TTF_GetFontHeight TTF_GetFontAscent TTF_Init TTF_GetFontLineSkip TTF_SetFontKerning TTF_GetGlyphImageForIndex TTF_GetGlyphKerning TTF_RenderGlyph_Blended TTF_CloseFont TTF_GetFontDescent

portaudio_x64

ord4 ord5 ord18 ord19 ord21 ord22

tinyfiledialogs64

tinyfd_openFileDialog

imm32

ImmGetContext ImmSetCandidateWindow ImmSetCompositionWindow ImmReleaseContext

Name

.textbss

Size

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

6.0MB

Virtual Size

6.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

117KB

Virtual Size

896KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

257KB

Virtual Size

256KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

20KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

777B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

1024B

Virtual Size

563B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

261KB

Virtual Size

260KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

52KB

Virtual Size

51KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

d2269f20bb4c553d660e8d0607016eb1fd4571fad3936dfad38df458d27a6fdd

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winmm

ws2_32

avcodec-62

avformat-62

avutil-60

shlwapi

sdl3

sdl3_ttf

portaudio_x64

tinyfiledialogs64

imm32

generic