714cb9d48c4688823f2c42e0887d958016b9adee146d94051a637d8a41af5310

Sharing

Copy URL Twitter E-mail

General

Target
714cb9d48c4688823f2c42e0887d958016b9adee146d94051a637d8a41af5310
Size 6.5MB
Sample261002-w7szjsvfla
SHA256 714cb9d48c4688823f2c42e0887d958016b9adee146d94051a637d8a41af5310
MD5 b9f1714c81c569bdae78b3b701e42b99
SHA1 b17a6fea3f2d7ef547b227abc6f94a038746c934
SHA512 f0af8e73cf033c2f79ceb2611d7bd818e2b96f8a957aac828c6705a8169cef5072554faf4f4b1c8f917438e2e17b8fb49abec50d44b0f63831eb79b4eb2f3009
SSDEEP 98304:aLIvI1KsESTck3U/sZxFWH8xR9LYqzs1h97HRMI41jle:aHB3o8o6rRI4
TLSH
T162668C11B401D025DAD112B0EEBEAEB65BA9BD1C17F644F3B2C039ECD9714D3363668A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
714cb9d48c4688823f2c42e0887d958016b9adee146d94051a637d8a41af5310

File Explorer

714cb9d48c4688823f2c42e0887d958016b9adee146d94051a637d8a41af5310

.exe 6.5MB

714cb9d48c4688823f2c42e0887d958016b9adee146d94051a637d8a41af5310

IMPHASH 86665111371ebe186f8c15814f336929
SHA256 714cb9d48c4688823f2c42e0887d958016b9adee146d94051a637d8a41af5310
MD5 b9f1714c81c569bdae78b3b701e42b99
SHA1 b17a6fea3f2d7ef547b227abc6f94a038746c934
SHA512 f0af8e73cf033c2f79ceb2611d7bd818e2b96f8a957aac828c6705a8169cef5072554faf4f4b1c8f917438e2e17b8fb49abec50d44b0f63831eb79b4eb2f3009
SSDEEP 98304:aLIvI1KsESTck3U/sZxFWH8xR9LYqzs1h97HRMI41jle:aHB3o8o6rRI4
TLSH
T162668C11B401D025DAD112B0EEBEAEB65BA9BD1C17F644F3B2C039ECD9714D3363668A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3779135

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ener6\Desktop\bomba bombelor\United2\client\United2_x86_Release.pdb

kernel32

GetLocaleInfoA ReleaseSemaphore QueryPerformanceCounter SetFilePointerEx GetFileSizeEx CreateFileW WriteFile SetFilePointer ReadFile OutputDebugStringA CreateFileMappingA UnmapViewOfFile MapViewOfFile GetFileSize GetModuleFileNameA RemoveDirectoryA DeleteFileA GlobalFree WriteConsoleW PeekConsoleInputA ReadConsoleInputW GetNumberOfConsoleInputEvents SetConsoleMode HeapSize FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage HeapReAlloc ReadConsoleW EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW GetTimeZoneInformation UnlockFileEx LockFileEx HeapCompact CreateProcessW FlushFileBuffers VirtualQuery VirtualProtect VirtualAlloc FileTimeToSystemTime SystemTimeToTzSpecificLocalTime SetStdHandle CompareStringA GetDriveTypeW GetModuleHandleExW FreeLibraryAndExitThread ExitThread LoadLibraryExW InitializeCriticalSectionAndSpinCount GlobalAlloc CreateThread GetSystemTimeAsFileTime CreateSemaphoreExW TerminateProcess AddVectoredExceptionHandler LoadLibraryW RemoveVectoredExceptionHandler CreateDirectoryA GetLocalTime FindClose FindNextFileA FindFirstFileA SetFileAttributesA SetThreadPriority CreateEventA InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DeleteCriticalSection WaitForSingleObject SetEvent Sleep OpenProcess GetSystemInfo InterlockedPushEntrySList RtlUnwind CreateSemaphoreW FlushViewOfFile ExpandEnvironmentStringsW ResetEvent SetConsoleCtrlHandler GetACP GetExitCodeProcess GenerateConsoleCtrlEvent GetProcessTimes MoveFileW GetSystemTime GetFileType CreateProcessA SystemTimeToFileTime SetEnvironmentVariableA DeleteFileW SetCurrentDirectoryA GetVersion DuplicateHandle GetCurrentDirectoryA CreatePipe SetEnvironmentVariableW RemoveDirectoryW GetFileAttributesExA MoveFileA WideCharToMultiByte lstrlenW GlobalLock GlobalUnlock GetVersionExA GetSystemDirectoryA GetModuleHandleA SetConsoleTextAttribute GetConsoleScreenBufferInfo WriteConsoleA GetConsoleMode GetDynamicTimeZoneInformation GetCurrentThreadId GetFileAttributesA ExitProcess GetStdHandle LoadLibraryExA SetEndOfFile GetFullPathNameA IsDBCSLeadByte OutputDebugStringW GetConsoleCP GetConsoleOutputCP SetLastError ResumeThread GetModuleHandleExA SetErrorMode GetProcessAffinityMask GetCurrentThread lstrcmpA GetEnvironmentVariableA TlsFree TlsSetValue TlsAlloc TlsGetValue GetModuleFileNameW WaitNamedPipeW PeekNamedPipe GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent HeapValidate GetCPInfo GetStringTypeW GetTickCount64 LCMapStringEx InitializeCriticalSectionEx DecodePointer EncodePointer QueryPerformanceFrequency GetLastError ReadProcessMemory GetCurrentProcess Module32Next Module32First GetCurrentProcessId CreateToolhelp32Snapshot GetTickCount GetCurrentDirectoryW MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryA HeapFree GetProcessHeap GetModuleHandleW GetTempPathW SetFileTime SetFileAttributesW GetFullPathNameW GetFileInformationByHandle GetFileAttributesExW GetFileAttributesW FindNextFileW FindFirstFileExW FindFirstFileW CreateDirectoryW SetCurrentDirectoryW LocalFree RaiseException SleepConditionVariableSRW WakeAllConditionVariable WakeConditionVariable TryAcquireSRWLockExclusive AcquireSRWLockExclusive ReleaseSRWLockExclusive GetNativeSystemInfo GetExitCodeThread SwitchToThread WaitForSingleObjectEx FormatMessageA HeapAlloc CloseHandle DeviceIoControl CreateFileA

user32

GetKeyState SystemParametersInfoA DestroyCursor ShowCursor SetWindowPos LoadIconA FindWindowA ScreenToClient GetCursorPos PostQuitMessage GetAsyncKeyState InvalidateRect SetRect GetDC ReleaseDC PeekMessageA ClientToScreen LoadImageA CharPrevA CharPrevExA SetCursor SetCursorPos SetCapture ReleaseCapture ChangeDisplaySettingsA ShowWindow GetCapture FlashWindowEx GetSystemMetrics IsIconic DefWindowProcA UnregisterClassA RegisterClassExA CreateWindowExA IsWindow DestroyWindow MoveWindow SetFocus UpdateWindow GetWindowLongA SetWindowLongA MessageBoxA RegisterClassA CharNextExA CharNextW GetClipboardData CloseClipboard GetMenu GetWindowRect AdjustWindowRectEx LoadCursorA GetMessageA TranslateMessage DispatchMessageA GetKeyboardLayoutNameA GetKeyboardLayout OpenClipboard GetClientRect

gdi32

DeleteObject GetTextExtentPoint32A GetStockObject EnumFontFamiliesExA CreateCompatibleDC DeleteDC SelectObject SetBkColor SetBkMode SetTextColor TextOutA CreateFontIndirectA GetCharABCWidthsFloatW GetTextExtentPoint32W TextOutW CreateDIBSection

advapi32

RegCreateKeyA RegSetValueA RegCloseKey RegQueryValueExW RegDeleteKeyA RegCreateKeyExA RegFlushKey RegQueryValueA RegLoadKeyA RegQueryInfoKeyA RegEnumValueA RegDeleteValueA RegConnectRegistryA RegSaveKeyA RegEnumKeyExA CryptReleaseContext RegCreateKeyExW RegSetValueExW RegOpenKeyA RegOpenKeyExA RegSetValueExA RegQueryValueExA RegOpenKeyExW

shell32

ShellExecuteA SHGetSpecialFolderPathA ShellExecuteW

ole32

CoGetClassObject CoInitialize OleUninitialize OleSetContainedObject CoInitializeEx OleInitialize CoUninitialize CoCreateInstance

oleaut32

SysFreeString VariantClear SysAllocString VariantInit

winmm

timeGetDevCaps timeEndPeriod timeGetTime timeBeginPeriod

d3d8

Direct3DCreate8

imm32

ImmGetCandidateListW ImmIsIME ImmGetContext ImmNotifyIME ImmGetOpenStatus ImmSetConversionStatus ImmGetConversionStatus ImmGetIMEFileNameA ImmSetCompositionStringW ImmGetCompositionStringW ImmAssociateContext ImmReleaseContext

iphlpapi

GetPerAdapterInfo GetAdaptersInfo

version

GetFileVersionInfoSizeA GetFileVersionInfoA VerQueryValueA

granny2

_GrannyGetControlRawLocalClock@4 _GrannySetControlEaseOutCurve@28 _GrannySetControlEaseOut@8 _GrannySetControlEaseInCurve@28 _GrannySetControlEaseIn@8 _GrannyGetControlLocalDuration@4 _GrannySetControlSpeed@8 _GrannyGetControlSpeed@4 _GrannySetControlLoopCount@8 _GrannyGetMeshTriangleGroupCount@4 _GrannyFreeControlIfComplete@4 _GrannyControlIsComplete@4 _GrannyCompleteControlAt@8 _GrannyFreeControlOnceUnused@4 _GrannyFreeControl@4 _GrannyGetMeshIndexCount@4 _GrannyMeshIsRigid@4 _GrannyGetMeshVertexCount@4 _GrannyGetTotalTypeSize@4 _GrannyGetWorldPoseComposite4x4@8 _GrannyGetWorldPose4x4@8 _GrannyFreeWorldPose@4 _GrannyNewWorldPose@4 _GrannySetControlRawLocalClock@8 _GrannyGetMeshBindingToBoneIndices@4 _GrannyFreeMeshBinding@4 _GrannyNewMeshBinding@12 _GrannyFreeModelInstance@4 _GrannyInstantiateModel@4 _GrannyGetWorldPoseComposite4x4Array@4 _GrannyFreeLocalPose@4 _GrannyNewLocalPose@4 _GrannyUpdateModelMatrix@20 _GrannySampleModelAnimationsAccelerated@20 _GrannyFreeCompletedModelControls@4 _GrannySetModelClock@8 _GrannyGetSourceSkeleton@4 _GrannyGetFileInfo@4 _GrannyFreeFile@4 _GrannyFreeFileSection@8 _GrannyReadEntireFileFromMemory@8 _GrannyConvertSingleObject@20 _GrannyFindMatchingMember@16 _GrannyGetMaterialTextureByType@8 _GrannyGetMeshTriangleGroups@4 _GrannyGetMeshVertexType@4 _GrannyCopyMeshVertices@12 _GrannyGetMeshVertices@4 _GrannyFindBoneByName@12 _GrannyPlayControlledAnimation@12 _GrannyCopyMeshIndices@12 _GrannyNewMeshDeformer@16 _GrannyFreeMeshDeformer@4 GrannyPNT332VertexType _GrannyDeformVertices@24 _GrannyGetControlLoopCount@4

devil

ilTexImage ilSave ilShutDown ilSetPixels ilInit ilDeleteImages ilCopyPixels ilConvertImage ilGetInteger ilLoad ilOriginFunc ilEnable ilBindImage ilGenImages

mss32

_AIL_close_stream@4 _AIL_start_stream@4 _AIL_pause_stream@8 _AIL_set_stream_volume_levels@12 _AIL_set_stream_loop_count@8 _AIL_stream_status@4 _AIL_shutdown@0 _AIL_allocate_sample_handle@4 _AIL_release_sample_handle@4 _AIL_init_sample@4 _AIL_set_sample_file@12 _AIL_start_sample@4 _AIL_stop_sample@4 _AIL_resume_sample@4 _AIL_set_redist_directory@4 _AIL_sample_volume_pan@12 _AIL_startup@0 _AIL_set_3D_orientation@28 _AIL_set_3D_velocity@20 _AIL_set_3D_position@16 _AIL_close_3D_listener@4 _AIL_open_3D_listener@4 _AIL_close_3D_provider@4 _AIL_open_3D_provider@4 _AIL_enumerate_3D_providers@12 _AIL_close_digital_driver@4 _AIL_open_stream@12 _AIL_open_digital_driver@16 _AIL_file_type@8 _AIL_decompress_ADPCM@12 _AIL_decompress_ASI@24 _AIL_WAV_info@8 _AIL_file_read@8 _AIL_mem_free_lock@4 _AIL_last_error@0 _AIL_end_sample@4 _AIL_set_sample_volume_pan@12 _AIL_set_sample_loop_count@8 _AIL_sample_status@4 _AIL_auto_update_3D_position@8 _AIL_3D_sample_volume@4 _AIL_3D_sample_status@4 _AIL_set_3D_sample_loop_count@8 _AIL_set_3D_sample_volume@8 _AIL_set_3D_sample_file@8 _AIL_end_3D_sample@4 _AIL_resume_3D_sample@4 _AIL_stop_3D_sample@4 _AIL_start_3D_sample@4 _AIL_release_3D_sample_handle@4 _AIL_allocate_3D_sample_handle@4 _AIL_set_file_callbacks@16 _AIL_stream_volume_levels@12

speedtreert

?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z ?SetTime@CSpeedTreeRT@@SAXM@Z ?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z ?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z ?SetLightState@CSpeedTreeRT@@SAXI_N@Z ?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z ?SetCamera@CSpeedTreeRT@@SAXPBM0@Z ??0SGeometry@CSpeedTreeRT@@QAE@XZ ??1SGeometry@CSpeedTreeRT@@QAE@XZ ??0STextures@CSpeedTreeRT@@QAE@XZ ??1STextures@CSpeedTreeRT@@QAE@XZ ??0CSpeedTreeRT@@QAE@XZ ??1CSpeedTreeRT@@QAE@XZ ??2CSpeedTreeRT@@SAPAXI@Z ??3CSpeedTreeRT@@SAXPAX@Z ?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z ?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ ?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z ?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z ?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z ?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ ?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z ?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z ?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ ?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ ?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ ?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z ?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z ?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z ?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ ?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z ?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ ?SetLodLevel@CSpeedTreeRT@@QAEXM@Z ?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z ?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z ?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ ?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ ?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z ?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z ?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z ?GetCurrentError@CSpeedTreeRT@@SAPBDXZ ?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z

dinput8

DirectInput8Create

ws2_32

WSAGetLastError select recv ioctlsocket __WSAFDIsSet closesocket connect inet_addr htons setsockopt WSACleanup socket WSAStartup gethostbyname send

libconfig++

?lookupValue@Setting@libconfig@@QBE_NPBDAA_J@Z ?lookupValue@Setting@libconfig@@QBE_NPBDAAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?add@Setting@libconfig@@QAEAAV12@PBDW4Type@12@@Z ??ASetting@libconfig@@QBEAAV01@H@Z ??0Config@libconfig@@QAE@XZ ??1Config@libconfig@@UAE@XZ ?getRoot@Config@libconfig@@QBEAAVSetting@2@XZ ?getLength@Setting@libconfig@@QBEHXZ ?getPath@SettingException@libconfig@@QBEPBDXZ ?add@Setting@libconfig@@QAEAAV12@W4Type@12@@Z ??4Setting@libconfig@@QAEAAV01@AB_J@Z ??4Setting@libconfig@@QAEAAV01@PBD@Z ??4Setting@libconfig@@QAEAAV01@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?writeFile@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?readFile@Config@libconfig@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?add@Setting@libconfig@@QAEAAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@W4Type@12@@Z ??ASetting@libconfig@@QBEAAV01@PBD@Z

Name

.text

Size

4.3MB

Virtual Size

4.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.5MB

Virtual Size

1.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

439KB

Virtual Size

984KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data1

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

46KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

227KB

Virtual Size

227KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

generic

count=2, id=261, version=34435,

count=25, id=260, version=34435,

count=63, id=259, version=30795,

count=252, id=261, version=30795,

count=6, id=170, productName=VS2010 build 30319, version=30319,

count=2, id=257, version=31329,

count=2, id=262, version=30795,

count=58, id=4, productName=VC++ 6.0 SP5 imp/exp build 8447, version=8447,

count=1, id=48, version=9044,

count=2, id=257, productName=VS2015 [14.0] build 23026, version=23026,

count=50, id=260, version=31329,

count=2, id=203, productName=VS2012 UPD3 build 60610, version=60610,

count=37, id=261, version=31329,

count=1, id=259, productName=VS2019 v16.9.2 build 29913, version=29913,

count=17, id=261, productName=VS2019 v16.9.2 build 29913, version=29913,

count=21, id=253, version=34321,

count=38, id=259, version=34321,

count=21, id=260, version=34321,

count=1, id=28, version=9178,

count=76, id=29, version=9178,

count=1, id=18, version=8444,

count=52, productName=Unmarked objects (old),

count=4, id=25, version=9210,

count=101, id=261, version=34321,

count=50, id=260, version=30795,

count=29, id=257, version=30795,

count=564, id=1, productName=Unmarked objects,

count=215, id=261, version=34809,

count=1, id=260, version=34809,

count=283, id=265, version=34809,

count=1, id=256, version=34809,

count=1, id=255, version=34809,

count=1, id=151,

count=1, id=258, version=34809,