Static task
static1
Behavioral task
behavioral1
Sample
5e03d61f2b52af5e8743b0a4d5bb3a98c357d7d965c24ae1009eceb3a7a2be29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5e03d61f2b52af5e8743b0a4d5bb3a98c357d7d965c24ae1009eceb3a7a2be29.exe
Resource
win10v2004-20220901-en
General
-
Target
5e03d61f2b52af5e8743b0a4d5bb3a98c357d7d965c24ae1009eceb3a7a2be29
-
Size
318KB
-
MD5
65d7ab6a2838e7b619167ba2e431d202
-
SHA1
911f4e01ec3e5246e1b3d6fd40102c9ba7ed1ba4
-
SHA256
5e03d61f2b52af5e8743b0a4d5bb3a98c357d7d965c24ae1009eceb3a7a2be29
-
SHA512
0180aa0c2c02eefe87409ae5d806253ece46032a6b12d7a46921e451e070ba0b625a903b8c472e1375bc2f1ad0bf79f4d76084a5111d3f5e5c94367b71b34c5c
-
SSDEEP
6144:G7IyR0gSJqEPH08OVbIBRm8bVDRWd1OPrB2jzlqZzYj639:klRbEPHOX8lMErgBqZkj49
Malware Config
Signatures
Files
-
5e03d61f2b52af5e8743b0a4d5bb3a98c357d7d965c24ae1009eceb3a7a2be29.exe windows x86
6e5fcb7c5fbd2a002bbb79b2ffa86a71
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
baccarat
??0BaccaratGameView@baccarat@table@aris@@QAE@ABVGameStaticConfiguration@game@3@HPAPAD@Z
?runImpl@BaccaratGameView@baccarat@table@aris@@UAEXXZ
?onTransferBalance@BaccaratGameView@baccarat@table@aris@@UAEXXZ
?onDeal@BaccaratGameView@baccarat@table@aris@@UAEXV?$shared_ptr@$$CBVDealEvent@baccarat@table@aris@@@boost@@@Z
?onCompleteState@BaccaratGameView@baccarat@table@aris@@UAEXV?$shared_ptr@$$CBVBaccaratCompleteStateEvent@baccarat@table@aris@@@boost@@@Z
??1BaccaratGameView@baccarat@table@aris@@UAE@XZ
gameview
??0GameViewProcess@view@game@aris@@QAE@XZ
?run@GameView@view@game@aris@@UAE?AW4ExitCode@IGameView@34@XZ
?handleError@GameView@view@game@aris@@UAEXABUErrorMessage@communication_foundation@4@@Z
?quit@GameView@view@game@aris@@UAEXW4ExitCode@IGameView@34@@Z
??1GameViewProcess@view@game@aris@@QAE@XZ
logging
??BStreamProxy@logging@aris@@QBE_NXZ
??0StreamProxy@logging@aris@@QAE@AAVBaseLogger@12@@Z
?logger_critical@aris@@3V?$Logger@$03@logging@1@A
?globalLevel@logging@aris@@YAHXZ
??1DefaultLoggingTree@aris@@QAE@XZ
??0DefaultLoggingTree@aris@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
??1StreamProxy@logging@aris@@QAE@XZ
msvcp100
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?_BADOFF@std@@3_JB
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?uncaught_exception@std@@YA_NXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1_Container_base12@std@@QAE@XZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?iostream_category@std@@YAABVerror_category@1@XZ
msvcr100
memcpy
memmove
memset
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
__CxxFrameHandler3
strrchr
memchr
??8type_info@@QBE_NABV0@@Z
??_V@YAXPAX@Z
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
strerror
exit
_XcptFilter
_exit
_cexit
__getmainargs
_amsg_exit
__initenv
kernel32
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
DecodePointer
EncodePointer
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
FormatMessageA
LocalFree
GetShortPathNameW
WideCharToMultiByte
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetFileInformationByHandle
CopyFileA
MoveFileA
CopyFileW
MoveFileW
CreateHardLinkA
CreateDirectoryA
DeleteFileA
RemoveDirectoryA
GetFullPathNameA
GetDiskFreeSpaceExA
CreateHardLinkW
CreateDirectoryW
DeleteFileW
RemoveDirectoryW
GetFullPathNameW
GetDiskFreeSpaceExW
SetFileTime
GetFileTime
FindClose
GetLastError
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFileAttributesExA
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateFileW
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
SetUnhandledExceptionFilter
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
CloseHandle
CreateFileA
GetProcAddress
GetModuleFileNameA
LoadLibraryA
FreeLibrary
Sections
.text Size: 94KB - Virtual size: 94KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vmp0 Size: 188KB - Virtual size: 492KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE