SwordWithSauce[.]exe

General

Target
SwordWithSauce.exe
Size 469KB
Sample261024-pbptpabw7m
SHA256 b02790133b3b22a803a4139f3ddfcfc32469f6ff2493fbd85f71d5cb04e5d5b4
MD5 c9f80ec92484ed622d1a0b77ba77d783
SHA1 54f873ee6fca4d03480f022fe3ae4205b76cc64c
SHA512 d03995c65ae9ddfdbd2ad489af95d7b520ac772ee4f6749381976a7c90426f92a683bd92c1e6d4d237d992b052b341b2a4d4bd821230cc9bf5c50b815e6f416f
SSDEEP 6144:pWaPqfURTnl/feMbl/mTxe+/9IIyuKvrxdPL7rL7WpsSmLyQd7e99R3ZY:waPFjl/2iypZy/fPX3jLyQdan1G
TLSH
T1B6A46C56B750E8DDF62C427458A3C58557767C365AA00E1B378AE2CA2EB3345CC2FE2C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SwordWithSauce.exe

File Explorer

SwordWithSauce.exe

.exe 469KB

SwordWithSauce.exe

IMPHASH 1708064a8d6bd384eaa937e5d49d514b
SHA256 b02790133b3b22a803a4139f3ddfcfc32469f6ff2493fbd85f71d5cb04e5d5b4
MD5 c9f80ec92484ed622d1a0b77ba77d783
SHA1 54f873ee6fca4d03480f022fe3ae4205b76cc64c
SHA512 d03995c65ae9ddfdbd2ad489af95d7b520ac772ee4f6749381976a7c90426f92a683bd92c1e6d4d237d992b052b341b2a4d4bd821230cc9bf5c50b815e6f416f
SSDEEP 6144:pWaPqfURTnl/feMbl/mTxe+/9IIyuKvrxdPL7rL7WpsSmLyQd7e99R3ZY:waPFjl/2iypZy/fPX3jLyQdan1G
TLSH
T1B6A46C56B750E8DDF62C427458A3C58557767C365AA00E1B378AE2CA2EB3345CC2FE2C
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6812

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

BootstrapPackagedGame-Win64-Shipping.pdb

kernel32

GetFileAttributesW CloseHandle GetLastError WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleFileNameW LoadResource LockResource SizeofResource FindResourceW LoadLibraryW WriteConsoleW CreateFileW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetStringTypeW LCMapStringW

user32

wsprintfW MessageBoxW

shell32

ShellExecuteExW

shlwapi

PathCombineW PathRemoveFileSpecW PathCanonicalizeW

Sharing