mariofootball[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
mariofootball.exe
Size 999KB
Sample260922-lryvradb95
SHA256 d5e944c2afa5d849639bfd17142231b931ff1f3b40e37d854f1ce87b9af94185
MD5 b45588d6d9a2ead9d4ace5fca45c8eef
SHA1 ca9737cfde1a1fc9125af397f09efc5af6763c8f
SHA512 e463a0067bf57a65c0ca3419b9dd2e34b22364e27cc00cfcfbf35646ce4fb3b7dd9f81eb50d4d5ff9687da858d4c231952e27c8ccc29b44b9f91c1756ec6a045
SSDEEP 24576:ce8VtaiSmuOjOaFgY2QpE9jbbTK6zUcBhd/e:weajpE9jbbvzTVe
TLSH
T14825014AA2E080B1C4C4533E5ADB2FBBAD7EA954176695C3C3843C6D9C73BE0583476E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mariofootball.exe

File Explorer

mariofootball.exe

.exe 999KB

mariofootball.exe

IMPHASH 69b6be8ce27bc22a52a4d6eb1c747383
SHA256 d5e944c2afa5d849639bfd17142231b931ff1f3b40e37d854f1ce87b9af94185
MD5 b45588d6d9a2ead9d4ace5fca45c8eef
SHA1 ca9737cfde1a1fc9125af397f09efc5af6763c8f
SHA512 e463a0067bf57a65c0ca3419b9dd2e34b22364e27cc00cfcfbf35646ce4fb3b7dd9f81eb50d4d5ff9687da858d4c231952e27c8ccc29b44b9f91c1756ec6a045
SSDEEP 24576:ce8VtaiSmuOjOaFgY2QpE9jbbTK6zUcBhd/e:weajpE9jbbvzTVe
TLSH
T14825014AA2E080B1C4C4533E5ADB2FBBAD7EA954176695C3C3843C6D9C73BE0583476E
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

146384

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

cncs232

ord18 ord19 ord32 ord81 ord24 ord101 ord176 ord56 ord206 ord6 ord23 ord36 ord158 ord33 ord179 ord186 ord2 ord149 ord299 ord58 ord16 ord3 ord105 ord193 ord200 ord335 ord336 ord151 ord188 ord363 ord366 ord334 ord390 ord340 ord375 ord191 ord187 ord199 ord108 ord55 ord338 ord374 ord120 ord196 ord195 ord89 ord165 ord435 ord189 ord192 ord154 ord90 ord313 ord312 ord311 ord351 ord350 ord387 ord410 ord305 ord307 ord308 ord352 ord333 ord310 ord303 ord349 ord361 ord409 ord348 ord408 ord392 ord347 ord411 ord64 ord163 ord174 ord92 ord94 ord93 ord109 ord91 ord140 ord52 ord168 ord138 ord162 ord71 ord78 ord77 ord76 ord61 ord125 ord79 ord70 ord69 ord60 ord132 ord62 ord98 ord133 ord129 ord75 ord34 ord35 ord12 ord68 ord48 ord150 ord346 ord54 ord115 ord169 ord143 ord50 ord65 ord116 ord178 ord177 ord80 ord106 ord171 ord107 ord173 ord172 ord112 ord113 ord114 ord86 ord96 ord160 ord30 ord29 ord117 ord118 ord119 ord111 ord95 ord88 ord161 ord136 ord83 ord67 ord170 ord412 ord103 ord156 ord372 ord391 ord407 ord66 ord57

winmm

joyGetPos

kernel32

WriteFile SetFilePointer CloseHandle ReadFile _lread _lwrite LockResource GetTickCount lstrcpy GetLastError CreateFileA lstrlen GlobalAddAtomA GlobalDeleteAtom _hread _llseek lstrcpyA lstrcatA lstrcmpA lstrcpynA GetCurrentDirectoryA SetCurrentDirectoryA CreateDirectoryA GlobalReAlloc GlobalAlloc GlobalLock lstrlenA GlobalUnlock GlobalFree GetExitCodeProcess CreateProcessA GetTempPathA GetTempFileNameA GetVersion LoadLibraryA _lopen _lclose SetErrorMode GetProcAddress FreeLibrary RemoveDirectoryA GetModuleFileNameA WinExec LocalAlloc LocalFree FindResourceA SizeofResource LoadResource FreeResource lstrcmp lstrcat FlushFileBuffers SetStdHandle GetTimeZoneInformation GetStringTypeW GetStringTypeA IsBadCodePtr IsBadWritePtr IsBadReadPtr SetUnhandledExceptionFilter GetStdHandle GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter RaiseException GetOEMCP GetACP GetCPInfo LCMapStringW WideCharToMultiByte LCMapStringA MultiByteToWideChar GetCurrentProcess TerminateProcess ExitProcess VirtualAlloc VirtualFree HeapCreate HeapDestroy GetCommandLineA GetStartupInfoA GetModuleHandleA FileTimeToLocalFileTime FileTimeToSystemTime FindClose FindNextFileA FindFirstFileA SetEnvironmentVariableA DeleteFileA HeapSize HeapFree HeapReAlloc HeapCompact HeapAlloc RtlUnwind CompareStringA CompareStringW SetEndOfFile

user32

OemToCharA PtInRect InvertRect MessageBoxA SetWindowTextA GetDlgItem wsprintfA MapVirtualKeyA GetInputState PeekMessageA SetTimer LoadStringA SetDlgItemTextA KillTimer SetWindowLongA SendDlgItemMessageA CreateWindowExA SetScrollRange SetRect GetKeyState PostMessageA IsZoomed GetWindowRect GetMenu DestroyMenu LoadMenuA GetMenuItemCount LoadMenuIndirectA GetMenuState DeleteMenu GetSubMenu IsWindowVisible SetWindowPos InvalidateRect ShowWindow DrawFocusRect GetSysColor UnionRect ClientToScreen SetScrollPos DestroyWindow SetFocus RemovePropA CallWindowProcA GetPropA SetPropA SetCursorPos GetCursorPos ShowCursor GetAsyncKeyState GetActiveWindow GetFocus ReleaseCapture SetCapture IntersectRect GetDesktopWindow RedrawWindow UpdateWindow WinHelpA SetForegroundWindow EnumThreadWindows IsWindow GetTopWindow GetClassNameA GetWindow LoadIconA LoadImageA RegisterClassExA RegisterClassA OffsetRect GetSystemMetrics CopyRect PostQuitMessage GetUpdateRect FillRect SendMessageA GetClientRect IsIconic CheckMenuItem EnableMenuItem GetParent GetDC ScreenToClient ReleaseDC BeginPaint EndPaint GetDlgItemTextA GetWindowLongA EndDialog

gdi32

SelectObject LineTo MoveToEx Rectangle CreateHatchBrush CreatePen StretchDIBits SelectPalette RealizePalette CreateSolidBrush GetStockObject CreatePalette CreateFontIndirectA GetObjectA GetTextExtentPointA GetCharWidthA GetTextMetricsA SetROP2 SetBkColor SetTextColor GetNearestPaletteIndex SetBkMode SetTextAlign DPtoLP TextOutA Polygon SetPolyFillMode SelectClipRgn CreateRectRgn LPtoDP DeleteObject

advapi32

RegQueryValueA RegOpenKeyA RegCloseKey

shell32

ShellExecuteA

Name

.text

Size

179KB

Virtual Size

178KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

TEXT_1

Size

47KB

Virtual Size

46KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

14KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

9KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

16KB

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

mariofootball.exe

cncs232

winmm

kernel32

user32

gdi32

advapi32

shell32

generic