Static task
static1
Behavioral task
behavioral1
Sample
CrystalPlay Launcher 1.4.5 BETA.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
CrystalPlay Launcher 1.4.5 BETA.exe
Resource
win10v2004-20220812-en
General
-
Target
CrystalPlay Launcher 1.4.5 BETA.exe
-
Size
699.8MB
-
MD5
dffbde9fbbfeddcc773210c467d000b5
-
SHA1
6ac5f55f4439e49c1e523c6cc394ac8ec761c8d9
-
SHA256
39dac4d03bd4178bc62f556d0a891979a8ccb3d688531b9f1976677b4345db0d
-
SHA512
00ccd524bf8fe1fe9ca1bb97cef73960839cf3548e7f13b8a5c239354aec8d775bf9cb41f1477405416b694a24337cd22306ffe707e77ccd7d64a729228b9b6f
-
SSDEEP
98304:n4PDZ1OVdvrBGReCrWT4bhcFKRlCJUi4mAUXdK0jriZmaTdlXyBVe90J:4PDClGfWT49dRleVNS7uV5J
Malware Config
Signatures
Files
-
CrystalPlay Launcher 1.4.5 BETA.exe.exe windows x86
781469843ceff2b27db37f92b58beda5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
msvcrt
__getmainargs
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 702KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PLS0 Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.PLS1 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.PLS2 Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ