Pizza Tower - The Eggplant Build[.]zip

Sharing

Copy URL Twitter E-mail

General

Target
Pizza Tower - The Eggplant Build.zip
Size 588.9MB
Sample261024-ym62saff87
SHA256 271eedfedfb2342a6a9f28eef62bdd2fe9f980e3dc01137075125f65b60a2015
MD5 e54a6ff4c0dd96851275643e2cd14bb5
SHA1 a84d0066a39f117659c6666fba5baad9cfede7ee
SHA512 994abd8c0f5b8583113930c334d8b5cfd8b733c426d92fedffce9c0d2f8b0a6f1946c0f80973d68258b49d2600d73e0f9928113c3b813a6f67cc24db5ef38011
SSDEEP 12582912:GaMYVi/3eAihtFzo/i9ufZfTZa/rYGEi8JKbj4hb1HCJDEwuPz:GaMm97hsi9Ic/MGEDKb01+gwW
TLSH
T17759336CA2B53A9EE933CCB9D9F1344105E8251B4343049DB6276DFC6CDBF21AE9D608
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Pizza Tower - The Eggplant Build/PizzaTower_GM2.exe

File Explorer

Pizza Tower - The Eggplant Build.zip

.zip 588.9MB
Pizza Tower - The Eggplant Build/PizzaTower_GM2.exe

.exe 4.9MB
Pizza Tower - The Eggplant Build/data.win

703.5MB
Pizza Tower - The Eggplant Build/options.ini

41B

Pizza Tower - The Eggplant Build.zip

SHA256 271eedfedfb2342a6a9f28eef62bdd2fe9f980e3dc01137075125f65b60a2015
MD5 e54a6ff4c0dd96851275643e2cd14bb5
SHA1 a84d0066a39f117659c6666fba5baad9cfede7ee
SHA512 994abd8c0f5b8583113930c334d8b5cfd8b733c426d92fedffce9c0d2f8b0a6f1946c0f80973d68258b49d2600d73e0f9928113c3b813a6f67cc24db5ef38011
SSDEEP 12582912:GaMYVi/3eAihtFzo/i9ufZfTZa/rYGEi8JKbj4hb1HCJDEwuPz:GaMm97hsi9Ic/MGEDKb01+gwW
TLSH
T17759336CA2B53A9EE933CCB9D9F1344105E8251B4343049DB6276DFC6CDBF21AE9D608
MD5 SHA1 SHA512 SSDEEP TLSH

Pizza Tower - The Eggplant Build/PizzaTower_GM2.exe

IMPHASH 14c0911e8ee70f8d13b0abd09d53379c
SHA256 22b684c859018f14682f6d9b81cafb2595e25b2928b9e10f819743fcac77a57c
MD5 853db39bddfc45727070cc7d29f98dd2
SHA1 b27ca1c6b4ce44c83b338650aa26052c38f6f807
SHA512 e8564a371d0db259764a54cae1b4105f597de4e2b37b5f6433f61af425e12547de372f70d9418f801e626af6997b592855cbcb740c5e333157cbee2f375de751
SSDEEP 49152:cRj2zP2OSvaMLo5iMoUKkMllQ5w3pmi2axhmwidmGpZiiL+MqTmBfVjeJK:ct2z9DGDk0lQX8idmyZz+M5BfVjb
TLSH
T195369D40BA52C176D1422074F0AA6BFB25396E64CF14C6C7BBE43F3C7A709D05AB395A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2963752

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\hudson\ZeusBase\ZeusGreen\GameMaker\Runner\VC_Runner\Win32\Release-Zeus\Runner.pdb

wininet

InternetReadFile InternetWriteFile HttpOpenRequestA InternetCloseHandle InternetCrackUrlA HttpEndRequestW HttpQueryInfoA InternetConnectA InternetOpenA InternetCanonicalizeUrlA HttpSendRequestA InternetGetConnectedState

d3d11

D3D11CreateDevice

dbghelp

MiniDumpWriteDump SymFromAddr SymInitialize

winmm

mciSendStringA mciGetErrorStringA joyGetPos timeGetDevCaps timeBeginPeriod timeEndPeriod joyGetPosEx

ws2_32

gethostname WSACleanup setsockopt sendto send recvfrom recv listen inet_ntoa inet_addr getsockopt ioctlsocket connect closesocket bind accept getpeername select __WSAFDIsSet ntohs ntohl htons htonl WSAStartup WSAGetLastError WSAAddressToStringA getaddrinfo freeaddrinfo socket

gdiplus

GdiplusStartup GdiplusShutdown

comctl32

InitCommonControlsEx

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

rpcrt4

UuidCreate UuidToStringW

dxgi

CreateDXGIFactory1

mf

MFCreateSampleGrabberSinkActivate MFCreateAudioRendererActivate MFCreateMediaSession MFCreateTopology MFCreateTopologyNode MFGetService

mfplat

MFShutdown MFCreateSourceResolver MFCreateMediaType MFStartup

kernel32

SetCurrentDirectoryW HeapReAlloc GetTimeZoneInformation SetStdHandle ReadConsoleW SetFilePointerEx GetFileSizeEx GetConsoleMode GetConsoleOutputCP FlushFileBuffers EnumSystemLocalesW IsValidLocale LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW SetConsoleCtrlHandler DecodePointer WriteFile GetStdHandle PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FindFirstFileExW ReadFile MoveFileExW SetFileAttributesW GetFileAttributesExW GetModuleHandleExW HeapWalk HeapValidate EncodePointer LoadLibraryExW InterlockedFlushSList InterlockedPushEntrySList RtlUnwind VirtualQuery GetProcessHeap HeapFree HeapAlloc InitializeSListHead RaiseException GetACP GetOEMCP GetStartupInfoW IsDebuggerPresent TerminateProcess UnhandledExceptionFilter FreeLibraryWhenCallbackReturns GetSystemTimeAsFileTime GetCurrentProcessorNumber IsProcessorFeaturePresent CreateSymbolicLinkW FlushProcessWriteBuffers CreateSemaphoreExW InitOnceExecuteOnce FlsFree FlsSetValue FlsGetValue FlsAlloc SetFileInformationByHandle FormatMessageA SleepConditionVariableSRW SleepConditionVariableCS WakeAllConditionVariable GetProcAddress LoadLibraryW WideCharToMultiByte GetLastError LoadLibraryA MultiByteToWideChar CloseHandle WaitForSingleObjectEx CreateEventExW OutputDebugStringA GetCPInfo GetCurrentDirectoryW DeleteFileW GetFullPathNameW SetLastError CreateThread GetExitCodeThread GetModuleHandleW LocalFree FormatMessageW SetCurrentDirectoryA GetCurrentDirectoryA FreeLibrary GetEnvironmentVariableW CreateDirectoryW FindClose FindFirstFileW FindNextFileW GetFileAttributesW RemoveDirectoryW Sleep GetExitCodeProcess CreateProcessW QueryPerformanceCounter QueryPerformanceFrequency WaitForSingleObject SetWaitableTimer CreateWaitableTimerW GetTickCount64 GetFileAttributesA GetCurrentProcess GetCurrentThread SetThreadPriority SetPriorityClass GlobalAlloc GlobalUnlock GlobalLock GlobalMemoryStatusEx GetSystemInfo GetVersionExW GetLocaleInfoW GetUserDefaultLCID VerSetConditionMask VerifyVersionInfoW ExitProcess lstrlenA GetCommandLineW ExpandEnvironmentStringsW CreateFileW GetFinalPathNameByHandleW SetUnhandledExceptionFilter SetErrorMode GetCurrentProcessId GetCurrentThreadId GetModuleFileNameW MoveFileA WakeConditionVariable InitializeConditionVariable TryEnterCriticalSection InitializeCriticalSectionEx AcquireSRWLockExclusive ReleaseSRWLockExclusive InitializeSRWLock TlsFree TlsSetValue TlsGetValue TlsAlloc DeleteCriticalSection InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection RtlCaptureStackBackTrace SubmitThreadpoolWork CloseThreadpoolWork CreateThreadpoolTimer SetThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolTimer CreateThreadpoolWait SetThreadpoolWait CloseThreadpoolWait GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW OutputDebugStringW GetStringTypeW SetEndOfFile IsValidCodePage HeapSize GetConsoleWindow WriteConsoleW GetFileInformationByHandleEx CreateThreadpoolWork

user32

PeekMessageW IsDialogMessageW SetProcessDPIAware GetForegroundWindow UpdateWindow SetWindowLongW EnumDisplaySettingsW MonitorFromWindow GetMonitorInfoW ScreenToClient SetWindowTextW ReleaseDC GetDC DrawTextW GetDlgItemTextW SetDlgItemTextW GetDlgItem EndDialog DialogBoxParamW CreateDialogParamW LoadImageW TranslateMessage SetDlgItemTextA DispatchMessageW LoadCursorW CallNextHookEx SetCursor AdjustWindowRectEx GetWindowRect GetClientRect SetForegroundWindow GetSystemMetrics ReleaseCapture SetCapture GetKeyState SetFocus BringWindowToTop SetWindowPos ShowWindow DestroyWindow CreateWindowExW RegisterClassExW DefWindowProcW PostMessageW SendMessageW MessageBoxW GetRawInputDeviceList GetRawInputDeviceInfoA MessageBoxA GetFocus IsClipboardFormatAvailable EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard keybd_event GetAsyncKeyState wsprintfW GetCursorPos GetActiveWindow MapWindowPoints ClientToScreen SetCursorPos MoveWindow

gdi32

SelectObject GetStockObject GetDeviceCaps

comdlg32

GetOpenFileNameW GetSaveFileNameW

advapi32

RegCloseKey RegQueryValueExW RegOpenKeyExW

shell32

SHGetFolderPathW ShellExecuteW

ole32

CoCreateInstance CoCreateFreeThreadedMarshaler CoTaskMemFree CoInitialize

dwmapi

DwmGetCompositionTimingInfo