Overview
overview
6Static
static
The embodi...il.iso
windows10-2004-x64
3install.exe
windows10-2004-x64
1kouma/custom.exe
windows10-2004-x64
1kouma/マ�...s.html
windows10-2004-x64
1kouma/マ�...a.html
windows10-2004-x64
1kouma/マ�...l.html
windows10-2004-x64
1kouma/マ�...q.html
windows10-2004-x64
1kouma/マ�...m.html
windows10-2004-x64
1kouma/マ�...u.html
windows10-2004-x64
1kouma/マ�...n.html
windows10-2004-x64
1kouma/マ�...e.html
windows10-2004-x64
1kouma/マ�...t.html
windows10-2004-x64
1kouma/マ�...y.html
windows10-2004-x64
1kouma/マ�...s.html
windows10-2004-x64
1kouma/マ�...e.html
windows10-2004-x64
1kouma/マ�...p.html
windows10-2004-x64
1kouma/マ�...w.html
windows10-2004-x64
1kouma/マ�...x.html
windows10-2004-x64
1kouma/東�...��.exe
windows10-2004-x64
6Static task
static1
Behavioral task
behavioral1
Sample
The embodiment of scarlet devil.iso
Resource
win10v2004-20220812-en
Behavioral task
behavioral2
Sample
install.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
kouma/custom.exe
Resource
win10v2004-20220901-en
Behavioral task
behavioral4
Sample
kouma/マニュアル/html/bonus.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
kouma/マニュアル/html/chara.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral6
Sample
kouma/マニュアル/html/controll.html
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
kouma/マニュアル/html/faq.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral8
Sample
kouma/マニュアル/html/item.html
Resource
win10v2004-20220901-en
Behavioral task
behavioral9
Sample
kouma/マニュアル/html/menu.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral10
Sample
kouma/マニュアル/html/option.html
Resource
win10v2004-20220901-en
Behavioral task
behavioral11
Sample
kouma/マニュアル/html/rule.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral12
Sample
kouma/マニュアル/html/select.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
kouma/マニュアル/html/story.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral14
Sample
kouma/マニュアル/html/subsys.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
kouma/マニュアル/html/title.html
Resource
win10v2004-20220901-en
Behavioral task
behavioral16
Sample
kouma/マニュアル/html/top.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
kouma/マニュアル/html/view.html
Resource
win10v2004-20220901-en
Behavioral task
behavioral18
Sample
kouma/マニュアル/index.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral19
Sample
kouma/東方紅魔郷.exe
Resource
win10v2004-20220901-en
Errors
General
-
Target
The embodiment of scarlet devil.iso
-
Size
321.4MB
-
MD5
93ef116498a19c57401d4e8275a080f8
-
SHA1
27b8ded041c4d2b1b2869a46504caf510e45d93f
-
SHA256
8bf3a5951ecf18c254e5d9d7c6e32a5777d9fda83c5d7ea2a5a0bb3be5f798ff
-
SHA512
69465cbb5678ffcad295e267f083b12d6fd5673c3d1e7f6a9a460bf1cfb9b77384ca2b5c87d39eb7594c1d06ccb4b712cc883363d394af2f63f804158924688e
-
SSDEEP
6291456:Ia4ZtLmt1mdoQnydj4wbpdV1pEADCjFwGXkSKYsD0TU7eF1Y:4ZtLCmmGydHJ1pvCiGRbR4qF
Malware Config
Signatures
Files
-
The embodiment of scarlet devil.iso.iso
-
install.exe.exe windows x86
397d0fff5195489e52ede33b977455c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
CopyFileA
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
HeapSize
SetStdHandle
RtlUnwind
HeapReAlloc
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
SetFilePointer
HeapAlloc
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
CloseHandle
user32
IsDlgButtonChecked
GetDlgItemTextA
DialogBoxParamA
KillTimer
MessageBoxA
EndDialog
GetDlgItem
SendMessageA
SetTimer
SetDlgItemTextA
shell32
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
kouma/bgm/th06_01.wav
-
kouma/bgm/th06_02.wav
-
kouma/bgm/th06_03.wav
-
kouma/bgm/th06_04.wav
-
kouma/bgm/th06_05.wav
-
kouma/bgm/th06_06.wav
-
kouma/bgm/th06_07.wav
-
kouma/bgm/th06_08.wav
-
kouma/bgm/th06_09.wav
-
kouma/bgm/th06_10.wav
-
kouma/bgm/th06_11.wav
-
kouma/bgm/th06_12.wav
-
kouma/bgm/th06_13.wav
-
kouma/bgm/th06_14.wav
-
kouma/bgm/th06_15.wav
-
kouma/bgm/th06_16.wav
-
kouma/bgm/th06_17.wav
-
kouma/custom.exe.exe windows x86
f7a4b43e277b128d4d8e9f3885ec28f3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DialogBoxParamA
IsDlgButtonChecked
MessageBoxA
EndDialog
GetDlgItem
SendMessageA
kernel32
HeapDestroy
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetLastError
ReadFile
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
HeapFree
CloseHandle
WriteFile
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
HeapAlloc
SetStdHandle
FlushFileBuffers
VirtualAlloc
HeapReAlloc
CreateFileA
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapSize
SetEndOfFile
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
Sections
.text Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
kouma/custom.txt
-
kouma/readme.txt
-
kouma/おまけ.txt
-
kouma/マニュアル/html/bonus.html.html
-
kouma/マニュアル/html/chara.html.html
-
kouma/マニュアル/html/controll.html.html
-
kouma/マニュアル/html/faq.html.html
-
kouma/マニュアル/html/img00.jpg.jpg
-
kouma/マニュアル/html/img06.jpg.jpg
-
kouma/マニュアル/html/item.html.html
-
kouma/マニュアル/html/menu.html.html
-
kouma/マニュアル/html/op00.jpg.jpg
-
kouma/マニュアル/html/op01.jpg.jpg
-
kouma/マニュアル/html/option.html.html
-
kouma/マニュアル/html/rule.html.html
-
kouma/マニュアル/html/select.html.html
-
kouma/マニュアル/html/sl00.jpg.jpg
-
kouma/マニュアル/html/sl01.bmp
-
kouma/マニュアル/html/sl01.jpg.jpg
-
kouma/マニュアル/html/sl02.bmp
-
kouma/マニュアル/html/sl02.jpg.jpg
-
kouma/マニュアル/html/sl03.bmp
-
kouma/マニュアル/html/sl03.jpg.jpg
-
kouma/マニュアル/html/story.html.html
-
kouma/マニュアル/html/subsys.html.html
-
kouma/マニュアル/html/title.html.html
-
kouma/マニュアル/html/tl00.jpg.jpg
-
kouma/マニュアル/html/top.html.html
-
kouma/マニュアル/html/view.html.html
-
kouma/マニュアル/index.html.html
-
kouma/東方紅魔郷.exe.exe windows x86
5ae42e48ce07c99b972488001e8e43a2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
dsound
ord11
d3d8
Direct3DCreate8
winmm
mmioSeek
mmioGetInfo
mmioSetInfo
mmioDescend
mmioRead
mmioAscend
mmioOpenA
mmioClose
midiOutUnprepareHeader
timeKillEvent
timeSetEvent
timeGetDevCaps
midiOutShortMsg
midiOutPrepareHeader
midiOutLongMsg
midiOutReset
midiOutClose
midiOutOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
joyGetPosEx
joyGetDevCapsA
midiOutGetNumDevs
mmioAdvance
kernel32
FlushFileBuffers
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
OutputDebugStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
CreateMutexA
CloseHandle
WaitForSingleObject
CreateEventA
CreateThread
FindClose
FindNextFileA
FindFirstFileA
Sleep
GetFileSize
GetFileTime
SetFilePointer
LCMapStringA
DeleteFileA
ReadFile
WriteFile
LocalFree
LocalAlloc
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
HeapFree
GetModuleHandleA
GetStringTypeA
InitializeCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
TlsAlloc
TlsGetValue
TlsSetValue
GetCurrentThreadId
SetLastError
TlsFree
IsBadWritePtr
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualProtect
GetSystemInfo
VirtualQuery
SetEndOfFile
CreateFileA
HeapAlloc
RtlUnwind
RaiseException
GetLocalTime
CreateDirectoryA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
user32
DrawTextW
MsgWaitForMultipleObjects
KillTimer
PostThreadMessageA
SetTimer
SetCursor
DefWindowProcA
LoadCursorA
RegisterClassA
CreateWindowExA
GetSystemMetrics
SystemParametersInfoA
ShowCursor
PeekMessageA
TranslateMessage
DispatchMessageA
ShowWindow
MoveWindow
DestroyWindow
DrawTextA
MessageBoxA
SetKeyboardState
GetKeyboardState
GetWindowLongA
gdi32
SetBkColor
CreateFontIndirectA
GetObjectA
GetStockObject
TextOutA
SetBkMode
SetTextColor
CreateDIBSection
DeleteDC
CreateCompatibleDC
CreateFontA
SelectObject
DeleteObject
Sections
.text Size: 420KB - Virtual size: 417KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
kouma/紅魔郷CM.DAT
-
kouma/紅魔郷ED.DAT
-
kouma/紅魔郷IN.DAT
-
kouma/紅魔郷MD.DAT
-
kouma/紅魔郷ST.DAT
-
kouma/紅魔郷TL.DAT
-
readme.txt