a2f8f47afc6b0d8da9addfd6422ce16cfab0c2155c8a84432a5e1a8bb1aff774

Sharing

Copy URL Twitter E-mail

General

Target
a2f8f47afc6b0d8da9addfd6422ce16cfab0c2155c8a84432a5e1a8bb1aff774
Size 11.2MB
Sample260930-e83rpssxew
SHA256 a2f8f47afc6b0d8da9addfd6422ce16cfab0c2155c8a84432a5e1a8bb1aff774
MD5 e2754da5948dfcc77729eb2bc44d1a27
SHA1 bd3b321866772419189a9cbfbc9006b8550bf7af
SHA512 f9c01da044fd0344d1d4d8c37c286c5420d67ad7fff12cc1a33f61eda93ef077cbfc8f9c9591b8fede2b6746861d403e23f5c925b298a0658702654d99763f62
SSDEEP 49152:rS2duFd5yhe4+yLwsbbLgvkXZpVj1NfWE8G2GwqZDSJxOWoaJ023N98rh3H0sj1e:mnUhLD7/EsnVO8/fJrBKW7rUaB4j
TLSH
T165C68D6921B801E8D07AE0B8CB179917FA72385903399AF706E1C6671F37BF1CA79D11
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2f8f47afc6b0d8da9addfd6422ce16cfab0c2155c8a84432a5e1a8bb1aff774

File Explorer

a2f8f47afc6b0d8da9addfd6422ce16cfab0c2155c8a84432a5e1a8bb1aff774

.exe 11.2MB

a2f8f47afc6b0d8da9addfd6422ce16cfab0c2155c8a84432a5e1a8bb1aff774

IMPHASH 2caa9869124dab3f14b0dac2d0b490dc
SHA256 a2f8f47afc6b0d8da9addfd6422ce16cfab0c2155c8a84432a5e1a8bb1aff774
MD5 e2754da5948dfcc77729eb2bc44d1a27
SHA1 bd3b321866772419189a9cbfbc9006b8550bf7af
SHA512 f9c01da044fd0344d1d4d8c37c286c5420d67ad7fff12cc1a33f61eda93ef077cbfc8f9c9591b8fede2b6746861d403e23f5c925b298a0658702654d99763f62
SSDEEP 49152:rS2duFd5yhe4+yLwsbbLgvkXZpVj1NfWE8G2GwqZDSJxOWoaJ023N98rh3H0sj1e:mnUhLD7/EsnVO8/fJrBKW7rUaB4j
TLSH
T165C68D6921B801E8D07AE0B8CB179917FA72385903399AF706E1C6671F37BF1CA79D11
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8467216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Soulash\x64\Soulash 2\Soulash 2.pdb

opengl32

glEnable glDrawArrays glBindTexture glGenTextures glTexParameteri glTexImage2D glBlendFunc glDeleteTextures glClear glPixelStorei glTexSubImage2D glViewport glClearDepth glClearColor glDisable glGetString

sdl2

SDL_PumpEvents SDL_SetCursor SDL_CreateWindow SDL_GL_SetSwapInterval SDL_GL_CreateContext SDL_GetDesktopDisplayMode SDL_SetRelativeMouseMode SDL_SetHint SDL_DestroyWindow SDL_SetWindowGrab SDL_GetNumVideoDisplays SDL_GetDisplayBounds SDL_GL_GetDrawableSize SDL_GL_SwapWindow SDL_PollEvent SDL_GameControllerGetJoystick SDL_GameControllerName SDL_InitSubSystem SDL_GL_SetAttribute SDL_GameControllerOpen SDL_IsGameController SDL_GameControllerClose SDL_JoystickInstanceID SDL_NumJoysticks SDL_Quit SDL_ShowSimpleMessageBox SDL_GetKeyName SDL_ShowCursor SDL_GetKeyFromName SDL_IsTextInputActive SDL_GameControllerGetAxis SDL_HasClipboardText SDL_CreateRGBSurfaceWithFormat SDL_SetClipboardText SDL_GetClipboardText SDL_UpperBlit SDL_FreeSurface SDL_StartTextInput SDL_FillRect SDL_StopTextInput SDL_OpenURL SDL_CreateColorCursor SDL_free SDL_Init SDL_Delay SDL_GetPrefPath SDL_memcpy SDL_wcslen SDL_strlen SDL_iconv_string SDL_SetMainReady SDL_GetError SDL_GetTicks

sdl2_mixer

Mix_LoadMUS Mix_Init Mix_HaltChannel Mix_FadeInMusic Mix_PlayChannel Mix_Playing Mix_CloseAudio Mix_LoadWAV Mix_VolumeChunk Mix_PlayMusic Mix_Quit Mix_OpenAudio Mix_HaltMusic Mix_VolumeMusic Mix_FreeMusic Mix_FreeChunk Mix_FadeOutMusic Mix_PlayingMusic

icuuc74

?insert@UnicodeString@icu_74@@QEAAAEAV12@HAEBV12@@Z ?remove@UnicodeString@icu_74@@QEAAAEAV12@HH@Z ??1ByteSink@icu_74@@UEAA@XZ ?GetAppendBuffer@ByteSink@icu_74@@UEAAPEADHHPEADHPEAH@Z ??0StringPiece@icu_74@@QEAA@AEBV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?getChar32Start@UnicodeString@icu_74@@QEBAHH@Z ?moveIndex32@UnicodeString@icu_74@@QEBAHHH@Z ?toUTF8@UnicodeString@icu_74@@QEBAXAEAVByteSink@2@@Z ?toLower@UnicodeString@icu_74@@QEAAAEAV12@XZ ??1UnicodeString@icu_74@@UEAA@XZ ?fromUTF8@UnicodeString@icu_74@@SA?AV12@VStringPiece@2@@Z ??3UMemory@icu_74@@SAXPEAX@Z ?Flush@ByteSink@icu_74@@UEAAXXZ ?tempSubString@UnicodeString@icu_74@@QEBA?AV12@HH@Z

glew32

__glewGetShaderInfoLog __glewCreateProgram __glewBindAttribLocation __glewGetProgramiv __glewCompileShader __glewGetShaderiv __glewUseProgram __glewEnableVertexAttribArray __glewGetUniformLocation __glewAttachShader __glewDeleteProgram __glewShaderSource __glewDisableVertexAttribArray __glewDetachShader __glewGetProgramInfoLog __glewDeleteShader __glewLinkProgram __glewBindVertexArray __glewVertexAttribPointer __glewBindBuffer __glewBufferSubData __glewBufferData __glewActiveTexture __glewCreateShader __glewGenBuffers glewInit __glewUniformMatrix4fv __glewUniform1i __glewGenVertexArrays

sdl2_ttf

TTF_RenderUTF8_Blended TTF_OpenFont TTF_SetFontHinting TTF_CloseFont TTF_Quit TTF_Init TTF_FontHeight TTF_WasInit TTF_RenderGlyph32_Blended

libcurl

curl_easy_strerror curl_easy_cleanup curl_easy_setopt curl_easy_perform curl_easy_init curl_global_cleanup curl_global_init

steam_api64

SteamAPI_RegisterCallResult SteamAPI_Shutdown SteamAPI_RegisterCallback SteamAPI_UnregisterCallResult SteamInternal_FindOrCreateUserInterface SteamAPI_RunCallbacks SteamInternal_ContextInit SteamAPI_UnregisterCallback SteamAPI_GetHSteamUser SteamInternal_SteamAPI_Init

sdl2_image

IMG_Load

bugsplat64

?sendAdditionalFile@MiniDmpSender@@QEAAXPEB_W@Z ??1MiniDmpSender@@UEAA@XZ ??0MiniDmpSender@@QEAA@PEB_W000K@Z ?setGuardByteBufferSize@MiniDmpSender@@QEAAHH@Z

kernel32

GetProcessHeap HeapFree HeapAlloc GetCommandLineW LCMapStringEx DecodePointer EncodePointer DeleteCriticalSection InitializeCriticalSectionEx LeaveCriticalSection EnterCriticalSection GetModuleHandleExW CloseThreadpoolWork SubmitThreadpoolWork CreateThreadpoolWork FreeLibraryWhenCallbackReturns RaiseException GetSystemTimeAsFileTime QueryPerformanceCounter FreeLibrary GetFileInformationByHandle LoadLibraryA RtlPcToFileHeader GetFinalPathNameByHandleW MultiByteToWideChar CreateSymbolicLinkW GetModuleHandleW GetStartupInfoW SetUnhandledExceptionFilter InitializeSListHead GetCurrentProcessId GetConsoleMode Sleep GetDynamicTimeZoneInformation WriteFile WriteConsoleA GetStdHandle SetConsoleTextAttribute GetConsoleScreenBufferInfo SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive IsDebuggerPresent GetCurrentThreadId LocalFree GetFileAttributesExW SetFileInformationByHandle GetProcAddress GetFullPathNameW CreateFile2 WideCharToMultiByte QueryPerformanceFrequency GetSystemTimePreciseAsFileTime InitOnceComplete InitOnceBeginInitialize FormatMessageA WakeConditionVariable CloseHandle GetLastError AreFileApisANSI WaitForSingleObjectEx GetExitCodeThread GetLogicalProcessorInformationEx GetLocaleInfoEx DeviceIoControl CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileInformationByHandleEx CreateHardLinkW MoveFileExW CopyFile2 GetDiskFreeSpaceExW

shell32

CommandLineToArgvW

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset __uncaught_exception __AdjustPointer __uncaught_exceptions __RTDynamicCast memmove __std_exception_destroy __std_exception_copy _purecall __std_terminate __std_type_info_name __RTtypeid __C_specific_handler set_unexpected _set_purecall_handler __current_exception __current_exception_context _CxxThrowException memchr memcmp memcpy

api-ms-win-crt-heap-l1-1-0

_callnewh _set_new_mode calloc malloc free

api-ms-win-crt-stdio-l1-1-0

_fseeki64 _wfsopen fseek _fsopen __stdio_common_vfprintf _get_stream_buffer_pointers _set_fmode _setmaxstdio fread fsetpos ungetc setvbuf __stdio_common_vsprintf_s fgetpos fwrite fgetc __stdio_common_vsprintf __p__commode fclose fflush fputc __acrt_iob_func

api-ms-win-crt-math-l1-1-0

_ldclass _dclass frexp atan2f log floorf sqrt sin sinf sqrtf round llround expf roundf exp cosf cos ceilf _dsign __setusermatherr acosf ceil fmodf lgamma tan floor pow

api-ms-win-crt-time-l1-1-0

strftime _time64 _gmtime64_s _localtime64_s

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _register_onexit_function _cexit _initialize_onexit_table terminate _initialize_narrow_environment _configure_narrow_argv _wassert _errno _set_abort_behavior _seh_filter_exe _set_app_type signal _get_narrow_winmain_command_line _initterm _initterm_e _exit _c_exit _register_thread_local_exe_atexit_callback _set_new_handler _beginthreadex _set_invalid_parameter_handler abort set_terminate exit

api-ms-win-crt-locale-l1-1-0

_configthreadlocale _lock_locales _unlock_locales _wsetlocale localeconv setlocale ___lc_locale_name_func ___lc_codepage_func ___mb_cur_max_func __pctype_func

api-ms-win-crt-convert-l1-1-0

strtoll strtoull strtoul strtof strtol strtod

api-ms-win-crt-string-l1-1-0

__strncnt islower isspace _wcsdup isdigit isupper toupper strcspn strlen tolower wcslen

api-ms-win-crt-filesystem-l1-1-0

_mkdir _lock_file _unlock_file _stat64i32

api-ms-win-crt-utility-l1-1-0

rand_s

Name

.text

Size

8.6MB

Virtual Size

8.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.2MB

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

218KB

Virtual Size

217KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

21KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.xdmenu

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

a2f8f47afc6b0d8da9addfd6422ce16cfab0c2155c8a84432a5e1a8bb1aff774

opengl32

sdl2

sdl2_mixer

icuuc74

glew32

sdl2_ttf

libcurl

steam_api64

sdl2_image

bugsplat64

kernel32

shell32

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

generic