Balatro[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Balatro.exe
Size 53.8MB
Sample260916-vgnfpsxw5m
SHA256 0d75fe164accf3312734d4b37ac98788dd15f0b8e4f9bb8b7f90c4e59de93f47
MD5 0b970613aa75561c15a3f6596c179275
SHA1 b37282b28749c6b1d057de10efc8d43a4fade95a
SHA512 43ed49780c32a6da43b331c76d78b214a054ef4b16985cb2a53bdf651d6de5b663e3dba7a16484fd73331aa8d3bcc6bef6feb0223acf493e0aa9b31430300829
SSDEEP 1572864:/J0bQ22JtEJSUjKaMCy534n312MuT2C2CyFr3:h0bQ22DxzaMJMuTOCyF7
TLSH
T125C72289C4FA9B6EEC342435EB1782B858952E0FD501B8BB81D93F3239BFE851B47514
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Balatro.exe

File Explorer

Balatro.exe

.exe 53.8MB

Balatro.exe

IMPHASH c296447493965716a3e30f60e2cd7fe4
SHA256 0d75fe164accf3312734d4b37ac98788dd15f0b8e4f9bb8b7f90c4e59de93f47
MD5 0b970613aa75561c15a3f6596c179275
SHA1 b37282b28749c6b1d057de10efc8d43a4fade95a
SHA512 43ed49780c32a6da43b331c76d78b214a054ef4b16985cb2a53bdf651d6de5b663e3dba7a16484fd73331aa8d3bcc6bef6feb0223acf493e0aa9b31430300829
SSDEEP 1572864:/J0bQ22JtEJSUjKaMCy534n312MuT2C2CyFr3:h0bQ22DxzaMJMuTOCyF7
TLSH
T125C72289C4FA9B6EEC342435EB1782B858952E0FD501B8BB81D93F3239BFE851B47514
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

7700

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

love

luaopen_love love_codename ?luax_resume@love@@YAHPEAUlua_State@@HPEAH@Z love_version luaopen_love_jitsetup love_openConsole

lua51

lua_isnumber lua_type lua_tonumber lua_tolstring lua_pushstring lua_pushcclosure lua_pushboolean lua_getfield lua_pushvalue lua_settop lua_gettop lua_newthread lua_close lua_createtable lua_setfield lua_rawseti lua_call luaL_openlibs luaL_newstate

msvcp120

?_Winerror_map@std@@YAPEBDH@Z ?_Syserror_map@std@@YAPEBDH@Z ?_Xout_of_range@std@@YAXPEBD@Z ?_Xlength_error@std@@YAXPEBD@Z ?_Xbad_alloc@std@@YAXXZ

msvcr120

_acmdln _initterm _initterm_e __setusermatherr _configthreadlocale _ismbblead _cexit _exit exit _fmode ?terminate@@YAXXZ ?_type_info_dtor_internal_method@type_info@@QEAAXXZ __crtSetUnhandledExceptionFilter _commode _purecall ??2@YAPEAX_K@Z ??3@YAXPEAX@Z printf memmove _CxxThrowException __CxxFrameHandler3 memcpy strcmp _lock _unlock _calloc_crt __dllonexit __C_specific_handler _onexit _XcptFilter __crtGetShowWindowMode _amsg_exit __getmainargs __set_app_type

shell32

CommandLineToArgvW

sdl2

SDL_memcpy SDL_free SDL_wcslen SDL_strlen SDL_iconv_string SDL_SetMainReady SDL_ShowSimpleMessageBox

kernel32

LocalFree GetProcessHeap HeapFree HeapAlloc GetCommandLineW GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter DecodePointer EncodePointer