3841868a574d1e509ca5da91d600bbe3c840b9e17fcac45eb7dcff1f2f9dce30

Sharing

Copy URL Twitter E-mail

General

Target

3841868a574d1e509ca5da91d600bbe3c840b9e17fcac45eb7dcff1f2f9dce30
Size

700KB
MD5

4708c4ae889542fa9d64a76065f37a50
SHA1

7602a319c6d0b27067e0e2edb2a58f2f12a3e5c5
SHA256

3841868a574d1e509ca5da91d600bbe3c840b9e17fcac45eb7dcff1f2f9dce30
SHA512

43630c7b9e4b72a2c18383eae41f2529c21d66f9d2cf04cae98a41fe7b6adfa1614f3990a6f53d8381dbd55fec6ca3bdc5f5a82e3804a7083d660b3fba3780e9
SSDEEP

12288:SFIkOzR1OAtVFKqU6Ba+HYCoswSItpM3JQ7+jefxSsPdf:r1g0KqU6wv+yfxSoZ

Score

N/A

Malware Config

Signatures

Files

3841868a574d1e509ca5da91d600bbe3c840b9e17fcac45eb7dcff1f2f9dce30
.exe windows x86

6d54239e57aba1a30ecc2a7e15b804c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

gamedev

?RegReadKeyStr@@YAHPBD00PADAAK@Z
?RegReadKeyInt@@YAHPBD00AAK@Z
?IsConnectOK@CGameLink@@QAEHXZ
?RecvCmd@CGameLink@@QAEHAAEPADAAH@Z
?ConnectServer@CGameLink@@QAEHPBDPAUHWND__@@@Z
?SendCmd@CGameLink@@QAEHEPBDH@Z
?CloseConnect@CGameLink@@QAEXXZ
??1CGameLink@@UAE@XZ
??0CGameLink@@QAE@XZ
??0CGetEmotion@@QAE@XZ
?SetMyName@CGetEmotion@@QAEXPBD@Z
?GetEmotion@CGetEmotion@@QAEHPBD0PAD@Z
?IsLocalMessage@CGetEmotion@@QAEHXZ
??1CGetEmotion@@UAE@XZ
?RegWriteKeyInt@@YAHPBD00H@Z

kernel32

RaiseException
HeapAlloc
HeapFree
TerminateProcess
GetACP
HeapSize
HeapReAlloc
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
ExitProcess
HeapCreate
VirtualFree
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
VirtualAlloc
IsBadCodePtr
FileTimeToSystemTime
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetFileTime
GetFileSize
GetFileAttributesA
HeapDestroy
FileTimeToLocalFileTime
FreeLibrary
LoadLibraryA
lstrcpynA
Sleep
GetTickCount
LocalFree
FormatMessageA
GetLastError
SetCurrentDirectoryA
GetVersionExA
lstrcpyA
CreateMutexA
ReleaseMutex
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetThreadLocale
WritePrivateProfileStringA
WideCharToMultiByte
lstrlenA
InterlockedIncrement
InterlockedDecrement
GetProfileStringA
SizeofResource
GetOEMCP
GetCPInfo
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
InitializeCriticalSection
GlobalAlloc
GetCurrentThread
WaitForSingleObject
CloseHandle
GetModuleFileNameA
GlobalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
lstrcmpA
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
IsBadReadPtr
IsBadWritePtr

user32

CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
GetDesktopWindow
GetClassNameA
SetRect
GetSysColorBrush
DestroyMenu
MapDialogRect
SetWindowContextHelpId
SetCursor
PostQuitMessage
LoadStringA
ValidateRect
InflateRect
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
UpdateWindow
MapWindowPoints
GetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
GetScrollInfo
GetTopWindow
IsChild
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
RegisterWindowMessageA
OffsetRect
IntersectRect
GetWindowPlacement
SetFocus
IsWindowEnabled
ShowWindow
SetWindowPos
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
MoveWindow
SetWindowLongA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
GetDlgItem
LoadMenuA
GetSubMenu
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
MessageBeep
GetSysColor
SetCapture
GetCapture
ReleaseCapture
LoadCursorA
ClientToScreen
RegisterHotKey
GetSystemMetrics
GetKeyState
GetClipCursor
GetParent
InvalidateRect
ShowCursor
ClipCursor
SetForegroundWindow
SetActiveWindow
IsIconic
GetCursorPos
SetCursorPos
mouse_event
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
MessageBoxA
LoadIconA
EnableWindow
IsWindowVisible
ReleaseDC
GetDC
GetClientRect
GetWindowRect
LoadBitmapA
PtInRect
GetDlgCtrlID
wsprintfA
SystemParametersInfoA
IsWindow
PostMessageA
SendMessageA
GetClassLongA

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
SetMapMode
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
CreateBitmap
PatBlt
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SetBkMode
GetStockObject
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
ExtTextOutA
CreateSolidBrush
GetObjectA
DeleteObject
BitBlt
CreateCompatibleBitmap
DeleteDC
CreateCompatibleDC
SelectObject
GetTextExtentPointA
CreateDIBitmap
CreateFontIndirectA

comdlg32

GetFileTitleA
ChooseColorA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 452KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d54239e57aba1a30ecc2a7e15b804c8

Headers

File Characteristics

Imports

winmm

gamedev

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 188KB - Virtual size: 185KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 12KB - Virtual size: 28KB

.rsrc Size: 452KB - Virtual size: 449KB

.text
Size: 188KB - Virtual size: 185KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 12KB - Virtual size: 28KB

.rsrc
Size: 452KB - Virtual size: 449KB