Static task
static1
Behavioral task
behavioral1
Sample
f2da05cbe073b3c2a963334083d27c86cecf9505bb7a8a9543ee8fb982098438.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f2da05cbe073b3c2a963334083d27c86cecf9505bb7a8a9543ee8fb982098438.exe
Resource
win10v2004-20220812-en
General
-
Target
f2da05cbe073b3c2a963334083d27c86cecf9505bb7a8a9543ee8fb982098438
-
Size
264KB
-
MD5
608182e16b86d271b39467bfd0ec3c90
-
SHA1
84d83308e670f1450afe5352122bcf96a03771b0
-
SHA256
f2da05cbe073b3c2a963334083d27c86cecf9505bb7a8a9543ee8fb982098438
-
SHA512
643f24440fc7ab1c662849b8d07ec246dfbc22979ea14d92322a9745adfb8454e920ba95fbf6f7ac8be9c8ee108792a518294f962bca1a563cd7d432be38152f
-
SSDEEP
6144:9et0foEgc49lbdiqJ5BvbLhLaIZJqbiaQ9Ql1iNhxVhv4hkROq2zo0naGo:2r1qZl1iNYMX2PaGo
Malware Config
Signatures
Files
-
f2da05cbe073b3c2a963334083d27c86cecf9505bb7a8a9543ee8fb982098438.exe windows x86
db164d4860634fffd41877af8ddc3815
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
QueryPerformanceCounter
RtlUnwind
ExitProcess
HeapCreate
HeapReAlloc
HeapDestroy
VirtualFree
IsBadWritePtr
TerminateProcess
SetUnhandledExceptionFilter
TlsAlloc
SetLastError
HeapSize
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
GetOEMCP
GetCPInfo
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
RaiseException
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadReadPtr
IsBadCodePtr
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CloseHandle
GetLastError
MultiByteToWideChar
lstrcpynA
WritePrivateProfileStringA
lstrcpyA
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetTickCount
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentThreadId
WideCharToMultiByte
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcessId
user32
DefWindowProcA
SetWindowLongA
SetWindowTextA
EnableWindow
GetForegroundWindow
GetActiveWindow
UnregisterClassA
FillRect
PtInRect
GetCapture
ReleaseCapture
OffsetRect
SetCursor
LoadCursorA
FlashWindow
SetCapture
DestroyWindow
PostMessageA
DialogBoxParamA
DrawTextA
GetWindow
SystemParametersInfoA
MapWindowPoints
SetWindowPos
GetParent
SetFocus
KillTimer
SetTimer
ReleaseDC
GetDC
GetWindowTextLengthA
GetWindowTextA
EndDialog
CreateDialogParamA
CallWindowProcA
GetWindowLongA
GetDlgItem
RedrawWindow
IsWindowVisible
ShowWindow
EndPaint
BeginPaint
GetClientRect
GetWindowRect
MoveWindow
SendMessageA
SetRect
gdi32
BitBlt
CreateFontA
CreatePatternBrush
CreateSolidBrush
DeleteDC
CreateFontIndirectA
CreateCompatibleDC
SelectObject
StretchBlt
DeleteObject
GetStockObject
SetTextColor
SetBkMode
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
shell32
ShellExecuteA
ruleedit
?GetNumericConfig@CRuleConfig@@QAEHIAA_J_J@Z
?PraseRuleString@CRuleConfig@@QAEHPBD0@Z
??1CRuleConfig@@QAE@XZ
??0CRuleConfig@@QAE@XZ
gamesave
?SnapStep@CGameSave@@QAEHIAAGAAK1AAPAD@Z
asdeatlgameframe
?GetSubUIFace@CFaceUI@@QAEPAV1@PBD0@Z
?DisplayChatText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@0H@Z
?SendFrameOperation@CMainFrame@@QAEHIJAAJ@Z
?AllocLayers@CViewManager@@QAEXG@Z
?LoadSkin@CSkinResouce@@SAPAV1@PAD@Z
?BuildPlayerListCtrlColumn@CMainFrame@@QAEJJPAUPLColumnInfo@@@Z
?ReSetRect@CViewUnit@@QAEXHHHH@Z
?Create@CDDrawSurface@@QAEJPAVCDisplay@@PAU_DDSURFACEDESC@@@Z
?Blt@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@K@Z
?LockDC@CDDrawSurface@@QAEPAUHDC__@@XZ
?UnlockDC@CDDrawSurface@@QAEJPAUHDC__@@@Z
?ClientToGameRect@CMainFrame@@QAEXPAUtagPOINT@@@Z
?BlockRecv@CMainFrame@@QAEHXZ
?UnBlockRecv@CMainFrame@@QAEHH@Z
?AsdeForceExitApplication@@YAJHH@Z
?CMainFrame_DisConstruct@CMainFrame@@CAXPAV1@@Z
?CMainFrame_Construct@CMainFrame@@CAXPAV1@PADFAAVCMainFrameTraits@@W4AD_GAME_TYPE@@@Z
?ProcessWindowMessage@CMainFrame@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessSocketXieYi@CMainFrame@@UAEHIAAVbistream@Win32Tools@@AAJK@Z
?ProcessFrameEvent@CMainFrame@@UAEHIJAAJ@Z
?ProcessWindowMessage@CSkinCheckBox@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinButton@@UAEHPAUHWND__@@IIJAAJK@Z
?GetCmdPlayerInfoAtServerSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?Attach@CSingleUnit@@QAEJPAVCViewManager@@GGIPAVCImageResource@@1@Z
?GetMyInfo@CMainFrame@@QAEPAUPLAYERINFO@@XZ
?GetCmdInfo@CMainFrame@@QAEAAUCMDINFO@@XZ
?GetDeskViewUnit@CMainFrame@@QAEPAVCViewUnit@@XZ
?AttachUnit@CViewManager@@QAEXPAVCViewUnit@@GG@Z
?SendPackage@CMainFrame@@QAEHPADG_N@Z
?PlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?GetGameSaveHandle@CMainFrame@@QAEPAVCGameSave@@XZ
?LVMoveTo@CViewUnit@@QAEXHHH@Z
?GetViewManager@CMainFrame@@QAEPAVCViewManager@@XZ
?Attach@CSingleUnit2@@QAEJPAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@2@Z
?ApplyText@CTextUnit@@QAEXPAD@Z
?Attach@CTextUnit@@QAEJAAUtagRECT@@PAVCViewManager@@GGPAVCDevice@@KPAUHFONT__@@IHKKK@Z
?FreeSkin@CSkinResouce@@SAXAAPAV1@@Z
?LVShow@CViewUnit@@QAEXEH@Z
?LVRefresh@CViewUnit@@QAEXH@Z
?GetBackBuffer@CDisplay@@QAEPAVCDDrawSurface@@XZ
??0CDDrawRender@@QAE@PAVCDDrawSurface@@@Z
?BltAlpha@CDDrawRender@@QAEJKKPAVCDDrawSurface@@0PAUtagRECT@@0KK@Z
??1CDDrawRender@@QAE@XZ
?LVChangeRect@CViewUnit@@QAEXHHHHH@Z
?ReSetRect@CViewUnit@@QAEXAAUtagRECT@@@Z
?OnDraw@CSingleUnit2@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDraw@CSingleUnit@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?CTextUnit_DisConstruct@CTextUnit@@CAXPAV1@@Z
?CTextUnit_Construct@CTextUnit@@CAXPAV1@@Z
?OnDraw@CTextUnit@@EAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDetchFrom@CTextUnit@@EAEXPAUCViewLayer@@PAUCViewArea@@@Z
?OnDrawText@CTextUnit@@UAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
??0CViewRect@@QAE@XZ
?__init__@CViewUnit@@AAEXHHHHE@Z
??1CViewRect@@QAE@XZ
?CreateOgg@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?GetDDSurf@CDDrawSurface@@QAEPAUIDirectDrawSurface@@XZ
?GetDrawDevice@CMainFrame@@QAEPAVCDevice@@XZ
?CreateFromJpeg@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?CreateFromBitmap@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?GetGameRect@CMainFrame@@QAEXPAUtagRECT@@@Z
?DetchSelf@CViewUnit@@QAEXXZ
?AsdeSetSkin@@YAPAVCSkinResouce@@PAV1@@Z
?GetSoundManager@CMainFrame@@QAEPAVCSoundManager@@XZ
?SetToEVolume@CSoundManager@@QAEXPAVCSoundBuffer@@@Z
?Destroy@CDDrawSurface@@QAEJXZ
?AsdeInitApplication@@YAJPAUHINSTANCE__@@HPBD111J@Z
?Create@CMainFrame@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBDKKV_U_MENUorID@4@PAX@Z
?AsdeTimerRunApplication@@YAJHK@Z
?AsdeUnInitApplication@@YAXXZ
?SubClass@CSkinButton@@QAEXPAUHWND__@@@Z
?SetSkin@CSkinButton@@QAEXPAVCFaceButton@@@Z
?LoadImageA@CImageResource@@SAPAUHBITMAP__@@PBDKK@Z
?ProcessWindowMessage@CSkinStatic@@UAEHPAUHWND__@@IIJAAJK@Z
?GetUIFace@CSkinResouce@@QAEPAVCFaceUI@@PBD0@Z
?SubClass@CSkinStatic@@QAEXPAUHWND__@@@Z
?GetBitmap@CGdiBitmap@@QAEPAUHBITMAP__@@XZ
?GetBmpInfo@CGdiBitmap@@QAEAAUtagBITMAP@@XZ
?GetSkinImage@CFaceUI@@QAEPAVCGdiBitmap@@XZ
??1CDDrawSurface@@QAE@XZ
??0CDDrawSurface@@QAE@PAUIDirectDrawSurface@@@Z
?SubClass@CSkinCheckBox@@QAEXPAUHWND__@@@Z
?SetColorKey@CDDrawSurface@@QAEJK@Z
?GetDDSC@CDDrawSurface@@QAEAAU_DDSURFACEDESC@@XZ
?BltColorkey@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@@Z
?LVChangeSize@CViewUnit@@QAEXHHHH@Z
??0CDDrawSurface@@QAE@XZ
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ