Static task
static1
Behavioral task
behavioral1
Sample
41d2156f9c44d7746443179bf2e906d8d7867e9b18548135d58e4e8e78075651.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
41d2156f9c44d7746443179bf2e906d8d7867e9b18548135d58e4e8e78075651.exe
Resource
win10v2004-20220901-en
General
-
Target
41d2156f9c44d7746443179bf2e906d8d7867e9b18548135d58e4e8e78075651
-
Size
184KB
-
MD5
e2139f0987f2a38eabf7c89e3dd74b80
-
SHA1
7c95c74d82c84d9be331254eb632480e7fe7c2a4
-
SHA256
41d2156f9c44d7746443179bf2e906d8d7867e9b18548135d58e4e8e78075651
-
SHA512
82d3f21180919720e3a184d4b12c051da5556d0cb034d2f44c3bc1588f6de926099a2e84fb72fdc39cb31212487af183c0e6ced5806a08c854f91809142f518c
-
SSDEEP
3072:zlx5v0CVOX8skNcrDhNf7ZWR3tbUh4hFEY2omxr4zpNpf5LZm/lUD1aM7dy:v5v0CVOX8skmrDhNfFWR3tbUhLFizp7a
Malware Config
Signatures
Files
-
41d2156f9c44d7746443179bf2e906d8d7867e9b18548135d58e4e8e78075651.exe windows x86
c219af33ec93a6c8a225f660a2f29243
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadReadPtr
WriteFile
GetCPInfo
GetEnvironmentStrings
FreeEnvironmentStringsW
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
IsBadCodePtr
SetFilePointer
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CloseHandle
lstrcpyA
GetModuleFileNameA
Sleep
GetTickCount
GetProcessHeap
HeapFree
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
RaiseException
GetLastError
WideCharToMultiByte
MultiByteToWideChar
TerminateProcess
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThreadId
SetLastError
TlsAlloc
IsBadWritePtr
VirtualFree
HeapCreate
SetUnhandledExceptionFilter
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
ExitProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
RtlUnwind
LeaveCriticalSection
EnterCriticalSection
HeapSize
HeapReAlloc
HeapAlloc
HeapDestroy
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
user32
EndDialog
GetDlgItem
GetActiveWindow
CallWindowProcA
GetWindowLongA
SetWindowLongA
DefWindowProcA
SetCursor
LoadCursorA
PostMessageA
GetCapture
ReleaseCapture
GetParent
IsWindow
KillTimer
SetTimer
CreateWindowExA
PtInRect
FillRect
SetRect
DestroyWindow
SendMessageA
gdi32
CreatePatternBrush
SelectObject
CreateFontIndirectA
StretchBlt
DeleteObject
DeleteDC
BitBlt
CreateCompatibleDC
advapi32
RegSetValueExA
RegCreateKeyA
RegCloseKey
gamesave
?SnapStep@CGameSave@@QAEHIAAGAAK1AAPAD@Z
ruleedit
?GetNumericConfig@CRuleConfig@@QAEHIAA_J_J@Z
??1CRuleConfig@@QAE@XZ
?PraseRuleString@CRuleConfig@@QAEHPBD0@Z
??0CRuleConfig@@QAE@XZ
asdeatlgameframe2
?OnInitDialog@CDialog@@QAEJIJ@Z
?AsdeGetRegSection@@YA?BV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@XZ
?AsdeUnInitApplication@@YAXXZ
?AsdeTimerRunApplication@@YAJHK@Z
?DisplayChatText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@0H@Z
?SendFrameOperation@CMainFrame@@QAEHIJAAJ@Z
?DisplayStartupText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?BuildPlayerListCtrlColumn@CMainFrame@@QAEJJPAUPLColumnInfo@@@Z
?AsdeMessageBox@@YAHPBD0I@Z
?GetDeskViewUnit@CMainFrame@@QAEPAVCViewUnit@LVDrawE@@XZ
?GetGameSaveHandle@CMainFrame@@QAEPAVCGameSave@@XZ
?GetJFDWString@@YAPBD_JAAF@Z
?AsdeMessageBoxEx@@YAHPBD0IHH@Z
?BlockRecv@CMainFrame@@QAEHXZ
?MessageBoxA@CMainFrame@@QAEHPBD0I@Z
?UnBlockRecv@CMainFrame@@QAEHH@Z
?AsdeForceExitApplication@@YAJHH@Z
?DoModal@CDialog@@QAEHPAUHWND__@@J@Z
?CMainFrame_DisConstruct@CMainFrame@@CAXPAV1@@Z
?CMainFrame_Construct@CMainFrame@@CAXPAV1@PADFAAVCMainFrameTraits@@W4AD_GAME_TYPE@@@Z
?ProcessWindowMessage@CMainFrame@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessSocketXieYi@CMainFrame@@UAEHIAAVbistream@Win32Tools@@AAJK@Z
?ProcessFrameEvent@CMainFrame@@UAEHIJAAJ@Z
?CDialog_DisConstruct@CDialog@@CAXPAV1@@Z
?CDialog_Construct@CDialog@@CAXPAV1@IPBD@Z
?ProcessWindowMessage@CDialog@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessFrameEvent@CDialog@@UAEHIJAAJ@Z
?SendPackage@CMainFrame@@QAEHPADG_N@Z
?GetMyInfo@CMainFrame@@QAEPAUPLAYERINFO@@XZ
?GetGameRectPos@CMainFrame@@QAEXPAUtagPOINT@@@Z
?GetCmdInfo@CMainFrame@@QAEAAUCMDINFO@@XZ
?SeatClientToServer@CMainFrame@@QAEFF@Z
?GetViewManager@CMainFrame@@QAEPAVCViewManager@LVDrawE@@XZ
?ClientToGameRect@CMainFrame@@QAEXPAUtagPOINT@@@Z
?GetDrawDevice@CMainFrame@@QAEPAVCDisplay@LVDrawE@@XZ
?GetCmdPlayerInfoAtClientSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?LoadVisualize@@YAHAAPAUHBITMAP__@@HHHHHPAPAU1@@Z
?AsdeSetSkin@@YAPAVCResouce@AtlSkin@@PAV12@H@Z
?GetGameRect@CMainFrame@@QAEXPAUtagRECT@@@Z
?SeatServerToClient@CMainFrame@@QAEFF@Z
?GetSoundManager@CMainFrame@@QAEPAVCSoundManager@@XZ
?AsdeInitApplication@@YAJPAUHINSTANCE__@@HPBD111J@Z
?Create@CMainFrame@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBDKKV_U_MENUorID@4@PAX@Z
?GetCmdPlayerInfoAtServerSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
lvdrawe2
?AllocLayers@CViewManager@LVDrawE@@QAEXG@Z
?ApplyText@CTextUnit@LVDrawE@@QAEXPBD@Z
?ReDraw@CViewManager@LVDrawE@@QAEJPAVCDisplay@2@HH@Z
?Present@CDisplay@LVDrawE@@QAEJXZ
?CreateFromBitmap@CDisplay@LVDrawE@@QAEPAVCDDrawSurface@2@PBDKKKK@Z
?CreateFromPng@CDisplay@LVDrawE@@QAEPAVCDDrawSurface@2@PBDKKKK@Z
?CreateFromGif@CDisplay@LVDrawE@@QAEPAVCDDrawSurface@2@PBDKKKK@Z
?OnDraw@CViewUnit@LVDrawE@@MAEJPAVCDisplay@2@HHAAUtagRECT@@HPAX@Z
?__init__@CViewUnit@LVDrawE@@AAEXHHHHE@Z
?__uninit__@CViewUnit@LVDrawE@@AAEXXZ
?GetPostion@CViewUnit@LVDrawE@@QBEPBUtagRECT@@XZ
?CreateFromJpeg@CDisplay@LVDrawE@@QAEPAVCDDrawSurface@2@PBDKKKK@Z
?BltColorkey@CDDrawSurface@LVDrawE@@QAEJKKPAV12@PAUtagRECT@@@Z
?GetAtib@CViewUnit@LVDrawE@@QBEEXZ
?GetRect@CViewUnit@LVDrawE@@QBEABUtagRECT@@XZ
?Release@CDDrawSurface@LVDrawE@@QAEJXZ
?CreateFromHANDLE@CDisplay@LVDrawE@@QAEPAVCDDrawSurface@2@PAUHBITMAP__@@KKKK@Z
?Attach@CTextUnit@LVDrawE@@QAEJPAVCDisplay@2@PAVCViewManager@2@GGPAUtagRECT@@KPAUHFONT__@@IHKKK@Z
?CTextUnit_DisConstruct@CTextUnit@LVDrawE@@AAEXXZ
?CTextUnit_Construct@CTextUnit@LVDrawE@@AAEXH@Z
?OnDraw@CTextUnit@LVDrawE@@EAEJPAVCDisplay@2@HHAAUtagRECT@@HPAX@Z
?OnAttachTo@CTextUnit@LVDrawE@@EAEXPAVCViewManager@2@GGPAX@Z
?OnDetchFrom@CTextUnit@LVDrawE@@EAEXPAVCViewManager@2@GG@Z
?LVMoveTo@CViewUnit@LVDrawE@@QAEXHHH@Z
?IsAttached@CViewUnit@LVDrawE@@QBEHXZ
?DetchSelf@CViewUnit@LVDrawE@@QAEHXZ
?LVRefresh@CViewUnit@LVDrawE@@QAEXH@Z
?BltAlpha@CDDrawSurface@LVDrawE@@QAEJKKPAV12@0PAUtagRECT@@0KK@Z
?LVChangeRect@CViewUnit@LVDrawE@@QAEXHHHHH@Z
?LVShow@CViewUnit@LVDrawE@@QAEXEH@Z
?SetName@CViewUnit@LVDrawE@@QAEXPBD@Z
?GetDDSC@CDDrawSurface@LVDrawE@@QBEAAU_DDSURFACEDESC@@XZ
?AttachUnit@CViewManager@LVDrawE@@QAEHPAVCViewUnit@2@GGPAX@Z
?Blt@CDDrawSurface@LVDrawE@@QAEJKKPAV12@PAUtagRECT@@K@Z
?BackSurface@CDisplay@LVDrawE@@QBEPAVCDDrawSurface@2@XZ
?LVChangeRect@CViewUnit@LVDrawE@@QAEXAAUtagRECT@@H@Z
drawfun
?LoadImageA@ImageResource@@YAPAUHBITMAP__@@PBDKK@Z
atlskin
?uinit@CSkinButton@AtlSkin@@AAEXXZ
?init@CSkinButton@AtlSkin@@AAEXXZ
?ProcessWindowMessage@CSkinButton@AtlSkin@@MAEHPAUHWND__@@IIJAAJK@Z
?Release@CFaceWindow@AtlSkin@@QAEXXZ
?subclass@CSkinButton@AtlSkin@@QAEHPAUHWND__@@KK@Z
hsound
?RePlayESound@CSoundManager@@QAEJPAVCSoundBuffer@@KK@Z
?PlayESound@CSoundManager@@QAEJPAVCSoundBuffer@@KK@Z
?CreateOggSound@CSoundManager@@QAEPAVCSoundBuffer@@PBDKU_GUID@@K@Z
Sections
.text Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uuu9 Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ