AssassinsCreed_Dx10[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
AssassinsCreed_Dx10.exe
Size 23.1MB
Sample261002-e5p2faha87
SHA256 4fde44afa11b54a8ac98f2ee2dd27cae39b6eb835543dc9c4c44edca7b1809c4
MD5 7f855aa375b51aafd0fc901fc56a053e
SHA1 f3572ef04dd3e855b4d1c403a30745ec3600d5d0
SHA512 5c6807fe6eed5937fc46c518d6feb176bb90153431085099e50bd160973e6004747f0b8895d59c491b90a5a5c704c98466343d88b340398d12a9d8d9e454e191
SSDEEP 196608:L6y/xQFQJU4PeRef5BxRJdkpzpNfwcp0rbZwf7eLV44fXgJJJJJJJJ:L3Qm9ecfhgYCsQJJJJJJJJ
TLSH
T103376C117BBFC670DA8A727934EDBA1B93A9EA580F188BC390903A0EDD752D05D771C1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AssassinsCreed_Dx10.exe

File Explorer

AssassinsCreed_Dx10.exe

.exe 23.1MB

AssassinsCreed_Dx10.exe

SHA256 4fde44afa11b54a8ac98f2ee2dd27cae39b6eb835543dc9c4c44edca7b1809c4
MD5 7f855aa375b51aafd0fc901fc56a053e
SHA1 f3572ef04dd3e855b4d1c403a30745ec3600d5d0
SHA512 5c6807fe6eed5937fc46c518d6feb176bb90153431085099e50bd160973e6004747f0b8895d59c491b90a5a5c704c98466343d88b340398d12a9d8d9e454e191
SSDEEP 196608:L6y/xQFQJU4PeRef5BxRJdkpzpNfwcp0rbZwf7eLV44fXgJJJJJJJJ:L3Qm9ecfhgYCsQJJJJJJJJ
TLSH
T103376C117BBFC670DA8A727934EDBA1B93A9EA580F188BC390903A0EDD752D05D771C1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

6010933

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\assassin\assassin-playground\dx10_integration\main\output\win32\exe\scimitar_dx10_f.pdb

??0CThreadInformer@@QAE@XZ ??0CThreadSndInformer@@QAE@XZ ??0CThreadToolInformer@@QAE@XZ ??0DareObjectFactory@@QAE@XZ ??3DareObjectFactory@@CAXPAX0@Z ??3DareObjectFactory@@CAXPAX@Z ??3SwitchOnAtomicLoadingPolicyPredicate@@CAXPAX0@Z ??3SwitchOnAtomicLoadingPolicyPredicate@@CAXPAX@Z ??4CThreadInformer@@QAEAAV0@ABV0@@Z ??4CThreadSndInformer@@QAEAAV0@ABV0@@Z ??4CThreadToolInformer@@QAEAAV0@ABV0@@Z ??4DareObjectFactory@@QAEAAV0@ABV0@@Z ??4SwitchOnAtomicLoadingPolicyPredicate@@QAEAAV0@ABV0@@Z ??_VDareObjectFactory@@CAXPAX0@Z ??_VDareObjectFactory@@CAXPAX@Z ??_VSwitchOnAtomicLoadingPolicyPredicate@@CAXPAX0@Z ??_VSwitchOnAtomicLoadingPolicyPredicate@@CAXPAX@Z ?CreateObject@DareObjectFactory@@QAEPAXAAK@Z ?DareCreateObject@DareObjectFactory@@AAEJAAPAXAAK@Z ?DareLoadObject@DareObjectFactory@@AAEJKPAXKAAPAXAAK@Z ?DareUnloadObject@DareObjectFactory@@AAEXKPAXK@Z ?EnterCriticalSectionToolEx_@@YAXK@Z ?EnterCriticalSectionTool_@@YAXXZ ?FreeAtomic@DareObjectFactory@@AAEXPAXAAK@Z ?GenerateUniqueId@DareObjectFactory@@QAEKPAX@Z ?LoadAtomicObjectEvent@DareObjectFactory@@AAEJKPAXKAAPAXAAK@Z ?LoadAtomicObjectMemorySoundData@DareObjectFactory@@AAEJKPAXKAAPAXAAK@Z ?LoadAtomicObjectProjectSettings@DareObjectFactory@@AAEJKPAXKAAPAXAAK@Z ?LoadAtomicObjectResource@DareObjectFactory@@AAEJKPAXKAAPAXAAK@Z ?LoadDependencies@DareObjectFactory@@QAEHK@Z ?LoadObject@DareObjectFactory@@QAEPAXKAAK@Z ?LoadObjectFromFile@DareObjectFactory@@AAEJKAAPAXAAK@Z ?LoadObjectFromMemory@DareObjectFactory@@AAEJKPAXKAAPAXAAK@Z ?MallocAtomic@DareObjectFactory@@AAEPAXIW4_SND_AtomicDAREObjectType@@AAK@Z ?Predicate@SwitchOnAtomicLoadingPolicyPredicate@@SAHXZ ?QuitCriticalSectionTool_@@YAXXZ ?RegisterNextLoadData@DareObjectFactory@@QAEXKPAXK@Z ?ResetRegisteredInfo@DareObjectFactory@@AAEXXZ ?SND_GetCurrentThreadId@@YAKXZ ?SND_Is_SSE_Supported@@YAHXZ ?SND_LoadProject@@YAJAAU_tdstProjectDesc@@PBX@Z ?SND_fn_bFileNameExist@@YAHPBD@Z ?SND_fn_bGetDopplerFlag@@YAHABVSNDObjectHandle@@@Z ?SND_fn_bGetInaudibleDistance@@YAMPAX0ABVSNDObjectHandle@@@Z ?SND_fn_bGetMasterDirectory@@YAHPADK@Z ?SND_fn_bGetOnePartialDirectory@@YAHKPADK@Z ?SND_fn_bGetOptions@@YAHPAD00H@Z ?SND_fn_bGetRollOffStaticParameter@@YAHABVSNDObjectHandle@@PAU_SND_tdstRollOffParam@@@Z ?SND_fn_bGetSoundEventNameFromEditorId@@YAHKPADK@Z ?SND_fn_bInitBinEvent@@YAHPAU_SND_tdstBlockEvent@@PAX@Z ?SND_fn_bIsDataDirectory@@YAHPBD@Z ?SND_fn_bIsScriptModeUsed@@YAHXZ ?SND_fn_bIsThreadSndInitialized@@YAHXZ ?SND_fn_bLoadDataInMem@@YAHPAXKPADK@Z ?SND_fn_bLoadResBinarySnd@@YAHPAU_tdstBlockResourceDisk@@PAU_tdstBlockResourceMem@@PAD2@Z ?SND_fn_bTestSnd_MMX@@YAHXZ ?SND_fn_bTestSnd_Pentium@@YAHXZ ?SND_fn_bTestSnd_Win32@@YAHXZ ?SND_fn_bTestSnd_WinMM@@YAHPAUtWAVEFORMATEX@@@Z ?SND_fn_bTestSnd_WinNT4@@YAHXZ ?SND_fn_csGetCurrentLangDirectory@@YAAAVsndCString@@XZ ?SND_fn_fConvertRealTimeToFloatTime@@YAMJ@Z ?SND_fn_fDistanceToVolume@@YAMM@Z ?SND_fn_fDistanceToVolumeEx@@YAMMPBU_RollOffParam@@@Z ?SND_fn_fDopplerPitch@@YAMPAU_SND_tdstVectorFloat@@000@Z ?SND_fn_fGetCurrentTime@@YAMPAX@Z ?SND_fn_fGetDolbyLtCoef@@YAMJ@Z ?SND_fn_fGetDolbyRtCoef@@YAMJ@Z ?SND_fn_fPseudoNormeVectorSnd@@YAMPBU_SND_tdstVectorFloat@@@Z ?SND_fn_fScalaireVectorSnd@@YAMPAU_SND_tdstVectorFloat@@0@Z ?SND_fn_hCreateTimer@@YAPAXXZ ?SND_fn_hGetSoundEventHandleFromEditorId@@YA?AVSNDObjectHandle@@K@Z ?SND_fn_hGetSoundEventHandleFromSectionName@@YA?AVSNDObjectHandle@@PAD@Z ?SND_fn_lGenerateSndTocKey@@YAJQBD@Z ?SND_fn_lGetSoundTextureCount@@YAJXZ ?SND_fn_lGetSoundTextureId@@YAJPAD@Z ?SND_fn_lGetSoundTextureIdArray@@YAJPAJJ@Z ?SND_fn_lGetSoundTextureName@@YAJJPADJ@Z ?SND_fn_lSoundAngleToDolbyAngle@@YAJJJ@Z ?SND_fn_lStrLwr@@YAPADPAD@Z ?SND_fn_lStriCmp@@YAJPBD0@Z ?SND_fn_pGetBinEvent@@YA?AV?$CObjectUFReference@U_SND_tdstBlockEvent@@V?$UnionFriendlyObjectHandle@U_SND_tdstBlockEvent@@@?$SND_ObjectManagerBase@KV?$DareLoadingManager@VAuthoritativeLoadingPolicy@@$0BI@$07$0CA@@@VDareObjectFactory@@@@$0BAAAAAAA@@@K@Z ?SND_fn_pGetBinRes@@YA?AV?$CObjectUFReference@U_tdstBlockResourceMem@@V?$UnionFriendlyObjectHandle@U_tdstBlockResourceMem@@@?$SND_ObjectManagerBase@KV?$DareLoadingManager@VAuthoritativeLoadingPolicy@@$0BI@$07$0CA@@@VDareObjectFactory@@@@$0CAAAAAAA@@@K@Z ?SND_fn_pGetBinSndData@@YA?AV?$CObjectUFReference@VSndData@@V?$UnionFriendlyObjectHandle@VSndData@@@?$SND_ObjectManagerBase@KV?$DareLoadingManager@VAuthoritativeLoadingPolicy@@$0BI@$07$0CA@@@VDareObjectFactory@@@@$0DAAAAAAA@@@KPAX@Z ?SND_fn_pstGetResFromEdIdSnd@@YAPAU_tdstBlockResourceMem@@K@Z ?SND_fn_pstGetSoundTextureList@@YAPAU_tdstSoundTextureList@@XZ ?SND_fn_rAbsRealSnd@@YAJJ@Z ?SND_fn_rConvertFloatTimeToRealTime@@YAJM@Z ?SND_fn_rDivRealRealQuickSnd@@YAJJJ@Z ?SND_fn_rDivRealRealSnd@@YAJJJ@Z ?SND_fn_rGetCurrentTime@@YAJPAX@Z ?SND_fn_rGetDopplerFactor@@YAJXZ ?SND_fn_rGetNormeSxd@@YAJPBU_SoundParam@@@Z ?SND_fn_rMulRealRealQuickSnd@@YAJJJ@Z ?SND_fn_rMulRealRealSnd@@YAJJJ@Z ?SND_fn_rNormeVectorSnd@@YAJPAU_SndVector@@@Z ?SND_fn_rtSndRealToSndRealTwin@@YAJJJ@Z ?SND_fn_szGetSoftDirectory@@YAPBDXZ ?SND_fn_ucPositionToDolby@@YAEPAU_SND_tdstVectorFloat@@00@Z ?SND_fn_ucPositionToPan@@YAEPAU_SND_tdstVectorFloat@@000@Z ?SND_fn_ulGetEditorIdFromSoundEventName@@YAKPBD@Z ?SND_fn_ulGetListOfSoundEventGroupName@@YAKPAY0IB@DK@Z ?SND_fn_ulGetListOfSoundEventNameInGroup@@YAKPBDPAY0IB@DK@Z ?SND_fn_ulGetNumberOfPartialDirectory@@YAKXZ ?SND_fn_ulGetNumberOfSoundEventGroup@@YAKXZ ?SND_fn_ulGetNumberOfSoundEventInGroup@@YAKPBD@Z ?SND_fn_vAddPartialDirectory@@YAXPBD@Z ?SND_fn_vBestConvertionForSndParToPrivSndPar@@YAXPAU_SoundParam@@PAU_PrivateSoundParam@@W4_tdePositionFormat@@PAU_tdstBlockResourceMem@@J@Z ?SND_fn_vDesInitSndData@@YAXXZ ?SND_fn_vDesInitThreadSnd@@YAXXZ ?SND_fn_vDesinitTimer@@YAXXZ ?SND_fn_vDestroyTimer@@YAXPAX@Z ?SND_fn_vEnterCriticalSectionSndMultipleObjectSnd_@@YAXPAX@Z ?SND_fn_vEnterCriticalSectionThreadSnd_@@YAXXZ ?SND_fn_vEnterCriticalSectionToolMultipleObjectSnd_@@YAXPAX@Z ?SND_fn_vGetDefaultRollOff@@YAXPAU_RollOffParam@@@Z ?SND_fn_vGetHModuleDbg@@YAPAUHINSTANCE__@@XZ ?SND_fn_vInitThreadSnd@@YAXXZ ?SND_fn_vInitTimer@@YAXXZ ?SND_fn_vPauseTimer@@YAXPAX@Z ?SND_fn_vProduitVectorSnd@@YAXPAU_SND_tdstVectorFloat@@00@Z ?SND_fn_vPurgeAllDirectories@@YAXXZ ?SND_fn_vQuitCriticalSectionThreadSnd@@YAXXZ ?SND_fn_vRemovePartialDirectory@@YAXPBD@Z ?SND_fn_vResetTimer@@YAXPAX@Z ?SND_fn_vResolveFileName@@YAXPBDPADK@Z ?SND_fn_vResumeTimer@@YAXPAX@Z ?SND_fn_vSetCurrentLangDirectory@@YAXPBD@Z ?SND_fn_vSetCurrentLanguage@@YAXPBD@Z ?SND_fn_vSetDefaultRollOff@@YAXPAU_RollOffParam@@@Z ?SND_fn_vSetDopplerFactor@@YAXJ@Z ?SND_fn_vSetMasterDirectory@@YAXPBD@Z ?SND_fn_vSetOptions@@YAXPAD00@Z ?SND_fn_vSetSoftDirectory@@YAXPBD@Z ?SND_fn_vSndParToPrivSndPar@@YAXPAU_SoundParam@@PAU_PrivateSoundParam@@W4_tdePositionFormat@@@Z ?SND_fn_vSndRealTwinToSndReal@@YAXJPAJ0@Z ?SND_fn_vStopBeforeUnLoadResSnd@@YAXPAU_tdstBlockResourceMem@@@Z ?SND_fn_vStrncat@@YAXPADPBDI@Z ?SND_fn_vStrncpy@@YAXPADPBDI@Z ?SND_fn_vSynchroTimer@@YAXXZ ?SND_fn_vUnLoadResBinarySnd@@YAXPAU_tdstBlockResourceMem@@@Z ?SND_fn_vVolPanToVolLR@@YAXJEPAJ0@Z ?SoftReloadObject@DareObjectFactory@@QAEJKPAX0@Z ?UnloadObject@DareObjectFactory@@QAEXKPAXK@Z ?_Dare_EnterCriticalSectionThreadSnd@@YAXXZ ?_Dare_QuitCriticalSectionThreadSnd@@YAXXZ Alloc Free Init MemCopy MemMove MemSet SND_fn_bInitStreamAsyncSnd SND_fn_bIsLastStreamAsyncDoneSnd SND_fn_bTestFileExistSnd SND_fn_cGetDirectorySeparator SND_fn_eSynchStreamAsyncSnd SND_fn_hCreateStreamAsyncSnd SND_fn_hOpenFileReadSnd SND_fn_iSoundDriverBusy SND_fn_ulGetFileSize SND_fn_ulReadFileSnd SND_fn_ulSeekFileSnd SND_fn_vCloseFileSnd SND_fn_vDesInitErrorSnd SND_fn_vDesInitStreamAsyncSnd SND_fn_vDestroyStreamAsyncSnd SND_fn_vDisplayError SND_fn_vDisplayErrorEx SND_fn_vInitErrorSnd SND_fn_vStartStreamAsyncSnd Uninit _snd_assert _snd_assert_message _snd_debugbreak _snd_debugbreak_message _snd_debugger_output _snd_log_message

Name

.text

Size

18.5MB

Virtual Size

18.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1.1MB

Virtual Size

17.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

4KB

Virtual Size

930B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

12KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data1

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1.4MB

Virtual Size

1.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

generic

count=4, id=126, version=50327,

count=67, id=125, productName=VS2005 build 50727, version=50727,

count=2, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=49, version=9044,

count=414, id=109, productName=VS2005 build 50727, version=50727,

count=2, id=93, productName=VS2003 (.NET) build 3077, version=3077,

count=1, id=96, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=27, id=93, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=3, id=95, productName=Windows Server 2003 SP1 DDK build 4035, version=4035,

count=6, id=123, productName=VS2005 build 50727, version=50727,

count=262, id=1, productName=Unmarked objects,

count=3280, id=110, productName=VS2005 build 50727, version=50727,

count=1, id=122, productName=VS2005 build 50727, version=50727,

count=1, id=124, productName=VS2005 build 50727, version=50727,

count=20, productName=Unmarked objects (old),

count=1, id=120, productName=VS2005 build 50727, version=50727,