SwordWithSauce[.]exe

General

Target
SwordWithSauce.exe
Size 442KB
Sample261024-pjdfmatzhy
SHA256 0068f4260f1c591e0a025594de8b34a323034503d145c89e657fdd959f3f8aff
MD5 e65dd0f2412e5397f0b287fd811bf838
SHA1 85d990c3599ce10a1407019eb0932ef4ac991a76
SHA512 c75af2128c7d8c9f85b3433f66fa3dff7bd422813fae71224556e72d8e73135b8d7809ce4a758bf43deae725cf35d4b8136de4384ab3f5eb2870c39f7944d7a8
SSDEEP 6144:10Rgs/ht90wWe+/NIIyuxvrzdPL7rL7WpsSmLyQd7e99R3Z:1Ab9/WpJyAtPX3jLyQdan1
TLSH
T1EEA47C51B750D8DDF62C567458A3C68552767C269EA00E1B3B8BE2CA2DB3305CC6FE2C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SwordWithSauce.exe

File Explorer

SwordWithSauce.exe

.exe 442KB

SwordWithSauce.exe

IMPHASH 6965597c50e79d174fc4cf1d2c47454f
SHA256 0068f4260f1c591e0a025594de8b34a323034503d145c89e657fdd959f3f8aff
MD5 e65dd0f2412e5397f0b287fd811bf838
SHA1 85d990c3599ce10a1407019eb0932ef4ac991a76
SHA512 c75af2128c7d8c9f85b3433f66fa3dff7bd422813fae71224556e72d8e73135b8d7809ce4a758bf43deae725cf35d4b8136de4384ab3f5eb2870c39f7944d7a8
SSDEEP 6144:10Rgs/ht90wWe+/NIIyuxvrzdPL7rL7WpsSmLyQd7e99R3Z:1Ab9/WpJyAtPX3jLyQdan1
TLSH
T1EEA47C51B750D8DDF62C567458A3C68552767C269EA00E1B3B8BE2CA2DB3305CC6FE2C
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

6536

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

BootstrapPackagedGame-Win64-Shipping.pdb

kernel32

GetFileAttributesW CloseHandle GetLastError WaitForSingleObject GetExitCodeProcess CreateProcessW GetModuleFileNameW LoadResource LockResource SizeofResource LoadLibraryW FindResourceW WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW LCMapStringW CreateFileW

user32

wsprintfW MessageBoxW

shell32

ShellExecuteExW

shlwapi

PathCombineW PathRemoveFileSpecW PathCanonicalizeW

Name

.text

Size

41KB

Virtual Size

40KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

36KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

2KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

192B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

355KB

Virtual Size

354KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

SwordWithSauce.exe

kernel32

user32

shell32

shlwapi

generic