Static task
static1
Behavioral task
behavioral1
Sample
472da874b68fda21bb25ac8be04ffe9aca1f31ebe57618b50ed6e6a1db8fbc60.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
472da874b68fda21bb25ac8be04ffe9aca1f31ebe57618b50ed6e6a1db8fbc60.exe
Resource
win10v2004-20220812-en
General
-
Target
472da874b68fda21bb25ac8be04ffe9aca1f31ebe57618b50ed6e6a1db8fbc60
-
Size
292KB
-
MD5
65028ec69ba4a7574feedb836b2de0f0
-
SHA1
31ef437e055c6fdd5ea4746d382370301d167133
-
SHA256
472da874b68fda21bb25ac8be04ffe9aca1f31ebe57618b50ed6e6a1db8fbc60
-
SHA512
fdc4cd26fdced93935544c6349a8fcefb9f1eeb74117cfe064cda74aa5e29d0b7ec14eca9ea8fef33562037448b27bb05159e00bd4a79bde6bc1e47dc601fcfa
-
SSDEEP
6144:wcKY8e12foEgc49lbkT5BvtAAUrL5B3qCilqDxYYA2QtHe/9KauKA+8kdLzo0na3:wcKjouhANBqZqGYat+/9Kh9cLPaGy
Malware Config
Signatures
Files
-
472da874b68fda21bb25ac8be04ffe9aca1f31ebe57618b50ed6e6a1db8fbc60.exe windows x86
67a3edabdd030a28bfb9f5aca4c11f3d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQuery
GetModuleHandleA
QueryPerformanceCounter
GetStartupInfoA
GetCommandLineA
LCMapStringA
LCMapStringW
GetCPInfo
VirtualProtect
GetSystemTimeAsFileTime
GetSystemInfo
ExitProcess
InterlockedIncrement
InterlockedDecrement
HeapSize
HeapReAlloc
HeapDestroy
GetCurrentProcessId
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
IsBadWritePtr
TerminateProcess
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetOEMCP
WriteFile
FlushFileBuffers
RaiseException
SetFilePointer
CloseHandle
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadReadPtr
IsBadCodePtr
SetStdHandle
ReadFile
GetLocaleInfoW
GetLastError
MultiByteToWideChar
lstrlenA
lstrcpynA
WritePrivateProfileStringA
lstrcpyA
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetTickCount
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentThreadId
WideCharToMultiByte
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
user32
DefWindowProcA
SetWindowLongA
SetWindowTextA
MessageBoxA
EnableWindow
GetForegroundWindow
UnregisterClassA
DialogBoxParamA
FillRect
PtInRect
GetCapture
ReleaseCapture
OffsetRect
SetCursor
LoadCursorA
FlashWindow
SetCapture
DestroyWindow
GetActiveWindow
SetRect
DrawTextA
GetWindow
SystemParametersInfoA
MapWindowPoints
SetWindowPos
GetParent
SetFocus
KillTimer
SetTimer
ReleaseDC
GetDC
GetWindowTextLengthA
GetWindowTextA
EndDialog
CallWindowProcA
GetWindowLongA
GetDlgItem
RedrawWindow
IsWindowVisible
ShowWindow
EndPaint
BeginPaint
GetClientRect
GetWindowRect
MoveWindow
SendMessageA
PostMessageA
gdi32
CreateFontIndirectA
CreateFontA
CreatePatternBrush
CreateSolidBrush
DeleteDC
CreateCompatibleDC
SelectObject
BitBlt
StretchBlt
DeleteObject
GetStockObject
SetTextColor
SetBkMode
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
shell32
ShellExecuteA
ruleedit
?GetNumericConfig@CRuleConfig@@QAEHIAA_J_J@Z
?PraseRuleString@CRuleConfig@@QAEHPBD0@Z
??1CRuleConfig@@QAE@XZ
??0CRuleConfig@@QAE@XZ
gamesave
?SnapStep@CGameSave@@QAEHIAAGAAK1AAPAD@Z
asdeatlgameframe
?Create@CMainFrame@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBDKKV_U_MENUorID@4@PAX@Z
?SetColorKey@CDDrawSurface@@QAEJK@Z
?SubClass@CSkinCheckBox@@QAEXPAUHWND__@@@Z
??0CDDrawSurface@@QAE@PAUIDirectDrawSurface@@@Z
??1CDDrawSurface@@QAE@XZ
??0CDDrawSurface@@QAE@XZ
?GetCmdPlayerInfoAtServerSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?DisplayChatText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@0H@Z
?SendFrameOperation@CMainFrame@@QAEHIJAAJ@Z
?AllocLayers@CViewManager@@QAEXG@Z
?LoadSkin@CSkinResouce@@SAPAV1@PAD@Z
?BuildPlayerListCtrlColumn@CMainFrame@@QAEJJPAUPLColumnInfo@@@Z
?ReSetRect@CViewUnit@@QAEXHHHH@Z
?Create@CDDrawSurface@@QAEJPAVCDisplay@@PAU_DDSURFACEDESC@@@Z
?Blt@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@K@Z
?LockDC@CDDrawSurface@@QAEPAUHDC__@@XZ
?UnlockDC@CDDrawSurface@@QAEJPAUHDC__@@@Z
?ClientToGameRect@CMainFrame@@QAEXPAUtagPOINT@@@Z
?BlockRecv@CMainFrame@@QAEHXZ
?UnBlockRecv@CMainFrame@@QAEHH@Z
?AsdeForceExitApplication@@YAJHH@Z
?CMainFrame_DisConstruct@CMainFrame@@CAXPAV1@@Z
?CMainFrame_Construct@CMainFrame@@CAXPAV1@PADFAAVCMainFrameTraits@@W4AD_GAME_TYPE@@@Z
?ProcessWindowMessage@CMainFrame@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessSocketXieYi@CMainFrame@@UAEHIAAVbistream@Win32Tools@@AAJK@Z
?ProcessFrameEvent@CMainFrame@@UAEHIJAAJ@Z
?ProcessWindowMessage@CSkinCheckBox@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinButton@@UAEHPAUHWND__@@IIJAAJK@Z
?Attach@CSingleUnit@@QAEJPAVCViewManager@@GGIPAVCImageResource@@1@Z
?GetCmdInfo@CMainFrame@@QAEAAUCMDINFO@@XZ
?GetMyInfo@CMainFrame@@QAEPAUPLAYERINFO@@XZ
?GetDeskViewUnit@CMainFrame@@QAEPAVCViewUnit@@XZ
?AttachUnit@CViewManager@@QAEXPAVCViewUnit@@GG@Z
?SendPackage@CMainFrame@@QAEHPADG_N@Z
?PlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?GetGameSaveHandle@CMainFrame@@QAEPAVCGameSave@@XZ
?LVMoveTo@CViewUnit@@QAEXHHH@Z
?GetViewManager@CMainFrame@@QAEPAVCViewManager@@XZ
?Attach@CSingleUnit2@@QAEJPAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@2@Z
?ApplyText@CTextUnit@@QAEXPAD@Z
?Attach@CTextUnit@@QAEJAAUtagRECT@@PAVCViewManager@@GGPAVCDevice@@KPAUHFONT__@@IHKKK@Z
?FreeSkin@CSkinResouce@@SAXAAPAV1@@Z
?SeatServerToClient@CMainFrame@@QAEFF@Z
?LVShow@CViewUnit@@QAEXEH@Z
?LVRefresh@CViewUnit@@QAEXH@Z
?GetBackBuffer@CDisplay@@QAEPAVCDDrawSurface@@XZ
??0CDDrawRender@@QAE@PAVCDDrawSurface@@@Z
?BltAlpha@CDDrawRender@@QAEJKKPAVCDDrawSurface@@0PAUtagRECT@@0KK@Z
??1CDDrawRender@@QAE@XZ
?LVChangeRect@CViewUnit@@QAEXHHHHH@Z
?ReSetRect@CViewUnit@@QAEXAAUtagRECT@@@Z
?OnDraw@CSingleUnit2@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDraw@CSingleUnit@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?CTextUnit_DisConstruct@CTextUnit@@CAXPAV1@@Z
?CTextUnit_Construct@CTextUnit@@CAXPAV1@@Z
?OnDraw@CTextUnit@@EAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDetchFrom@CTextUnit@@EAEXPAUCViewLayer@@PAUCViewArea@@@Z
?OnDrawText@CTextUnit@@UAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
??0CViewRect@@QAE@XZ
?__init__@CViewUnit@@AAEXHHHHE@Z
??1CViewRect@@QAE@XZ
?CreateOgg@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?GetDDSurf@CDDrawSurface@@QAEPAUIDirectDrawSurface@@XZ
?GetDrawDevice@CMainFrame@@QAEPAVCDevice@@XZ
?CreateFromJpeg@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?CreateFromBitmap@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?GetGameRect@CMainFrame@@QAEXPAUtagRECT@@@Z
?DetchSelf@CViewUnit@@QAEXXZ
?AsdeSetSkin@@YAPAVCSkinResouce@@PAV1@@Z
?GetSoundManager@CMainFrame@@QAEPAVCSoundManager@@XZ
?SetToEVolume@CSoundManager@@QAEXPAVCSoundBuffer@@@Z
?Destroy@CDDrawSurface@@QAEJXZ
?AsdeInitApplication@@YAJPAUHINSTANCE__@@HPBD111J@Z
?AsdeTimerRunApplication@@YAJHK@Z
?AsdeUnInitApplication@@YAXXZ
?GetSubUIFace@CFaceUI@@QAEPAV1@PBD0@Z
?SubClass@CSkinButton@@QAEXPAUHWND__@@@Z
?SetSkin@CSkinButton@@QAEXPAVCFaceButton@@@Z
?LoadImageA@CImageResource@@SAPAUHBITMAP__@@PBDKK@Z
?GetUIFace@CSkinResouce@@QAEPAVCFaceUI@@PBD0@Z
?GetBitmap@CGdiBitmap@@QAEPAUHBITMAP__@@XZ
?GetBmpInfo@CGdiBitmap@@QAEAAUtagBITMAP@@XZ
?GetSkinImage@CFaceUI@@QAEPAVCGdiBitmap@@XZ
?BltColorkey@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@@Z
?LVChangeSize@CViewUnit@@QAEXHHHH@Z
?GetDDSC@CDDrawSurface@@QAEAAU_DDSURFACEDESC@@XZ
Sections
.text Size: 192KB - Virtual size: 191KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ