Tekken 3[.]exe | Triage™

General

Target
Tekken 3.exe
Size 26.3MB
Sample261024-mc49nahs6v
SHA256 74405c6442cbf02e9d3792909e51cb345237f1f0818849f8873dabb79f528c19
MD5 a030fec64e9416c2983e2038cec052c8
SHA1 123a81951628396da21b586f4b47626662df6b0d
SHA512 a5cf5907492340a1985127caa31fa94349912208832d4443e87f70c62e25f703c700e254b85e846a7e3ff2dce63752f57a78fd13af9133e736b394319a72205c
SSDEEP 786432:EKYwKdmclOTTckEKciA6dsNq1HFyLjOqzz:GdWTZPciA6dyeFyLj1zz
TLSH
T1FB573306B703C437EAAA16764C214BE84F31BDB1677DE1F79B807AADD9303D1943258A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Tekken 3.exe

File Explorer

Tekken 3.exe

.exe 26.3MB

Tekken 3.exe

IMPHASH 1ff847646487d56f85778df99ff3728a
SHA256 74405c6442cbf02e9d3792909e51cb345237f1f0818849f8873dabb79f528c19
MD5 a030fec64e9416c2983e2038cec052c8
SHA1 123a81951628396da21b586f4b47626662df6b0d
SHA512 a5cf5907492340a1985127caa31fa94349912208832d4443e87f70c62e25f703c700e254b85e846a7e3ff2dce63752f57a78fd13af9133e736b394319a72205c
SSDEEP 786432:EKYwKdmclOTTckEKciA6dsNq1HFyLjOqzz:GdWTZPciA6dyeFyLj1zz
TLSH
T1FB573306B703C437EAAA16764C214BE84F31BDB1677DE1F79B807AADD9303D1943258A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

10721

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

_lclose GetModuleFileNameA _lread _llseek _lopen _lwrite _lcreat CreateDirectoryA SetCurrentDirectoryA lstrcatA FreeLibrary GetProcAddress LoadLibraryA GetDiskFreeSpaceA GetFileAttributesA RemoveDirectoryA DeleteFileA lstrlenA GetCurrentDirectoryA CloseHandle GetExitCodeProcess GetLastError LocalFree GetCurrentProcess MoveFileExA Sleep GetStringTypeW MultiByteToWideChar LCMapStringW HeapReAlloc RtlUnwind HeapSize lstrcpyA GetTempPathA CompareStringA IsValidCodePage GetOEMCP GetModuleHandleW ExitProcess DecodePointer HeapFree HeapAlloc GetCommandLineA HeapSetInformation GetStartupInfoW InitializeCriticalSectionAndSpinCount DeleteCriticalSection LeaveCriticalSection EnterCriticalSection EncodePointer LoadLibraryW UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement WriteFile GetStdHandle GetModuleFileNameW IsProcessorFeaturePresent HeapCreate FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW SetHandleCount GetFileType QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime GetCPInfo GetACP

user32

TranslateMessage DispatchMessageA PeekMessageA wsprintfA LoadCursorA SetCursor MessageBoxA MsgWaitForMultipleObjects

advapi32

GetTokenInformation OpenProcessToken

shell32

ShellExecuteExA

Sharing