Static task
static1
Behavioral task
behavioral1
Sample
93a4bfdf2ba7a2e3a382a170f5a3cccff91f959ac0577f507dd4cc60e67293cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
93a4bfdf2ba7a2e3a382a170f5a3cccff91f959ac0577f507dd4cc60e67293cd.exe
Resource
win10v2004-20220812-en
General
-
Target
93a4bfdf2ba7a2e3a382a170f5a3cccff91f959ac0577f507dd4cc60e67293cd
-
Size
716KB
-
MD5
805d50a6dd1e6837e0d183ad13e67230
-
SHA1
c2035ac6e0c247397887e671c44f8b1d7b258165
-
SHA256
93a4bfdf2ba7a2e3a382a170f5a3cccff91f959ac0577f507dd4cc60e67293cd
-
SHA512
8200476e2ee1cd962f126dc74b9e9f01962c302c9b36dcc7320c1f55fb90d755b8dfd0cd45e59c9745592e8da84ddbefd19ee9e62f959045edeaa8e666cd7952
-
SSDEEP
12288:LlcxJir9g0hmeb+qoHnQbIQH+BZvjV/VXC2tSsfswH5ug+cLEYTs8O3+myxbPaGn:LloJ30oeKqjGXowHUg+S/TBs+JPaGn
Malware Config
Signatures
Files
-
93a4bfdf2ba7a2e3a382a170f5a3cccff91f959ac0577f507dd4cc60e67293cd.exe windows x86
f6ee983c9a114e0648427bec2a2e4600
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
FreeEnvironmentStringsW
IsValidCodePage
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
FindNextFileA
SetCurrentDirectoryA
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
HeapSize
TerminateProcess
HeapReAlloc
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
FileTimeToLocalFileTime
SetErrorMode
GetFileTime
GetFileAttributesA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentDirectoryA
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetTickCount
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
InterlockedDecrement
CloseHandle
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
lstrcpynA
GetModuleHandleA
GetProcAddress
IsDBCSLeadByte
Sleep
GetPrivateProfileIntA
GetPrivateProfileStringA
GetLastError
WritePrivateProfileStringA
WideCharToMultiByte
CreateDirectoryA
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
GetThreadLocale
GetVersion
CompareStringW
CompareStringA
RaiseException
lstrcmpiA
lstrlenA
GetVersionExA
GetLocaleInfoA
GetACP
GetLocalTime
SizeofResource
LockResource
LoadResource
FindResourceA
IsValidLocale
GetModuleFileNameA
user32
GetActiveWindow
ValidateRect
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TranslateMessage
TrackPopupMenu
wsprintfA
SetScrollPos
GetScrollPos
SetForegroundWindow
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
GetParent
GetDC
SetWindowRgn
CopyRect
InvalidateRect
GetCapture
EnableWindow
GetClientRect
FillRect
LoadImageA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MoveWindow
PostMessageA
EqualRect
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
PostQuitMessage
CreatePopupMenu
RegisterClipboardFormatA
MapDialogRect
SetWindowContextHelpId
SetCursor
IsIconic
GetWindowPlacement
GetSystemMetrics
PtInRect
GetWindow
GetWindowRect
ShowWindow
InflateRect
GetSysColor
RedrawWindow
LoadIconA
SendMessageA
LoadCursorA
GetMessageA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
MessageBoxA
GetDesktopWindow
CharUpperA
UnregisterClassA
UpdateWindow
GetCursorPos
ScreenToClient
SetTimer
KillTimer
ReleaseDC
ShowOwnedPopups
CharNextA
TranslateAcceleratorA
SetMenu
BringWindowToTop
FindWindowA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
SetRect
IsRectEmpty
PostThreadMessageA
GetSysColorBrush
GetMenuItemInfoA
DestroyCursor
SetCursorPos
SetCapture
LoadMenuA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
SetRectEmpty
LoadAcceleratorsA
InsertMenuItemA
GetKeyState
ReleaseCapture
gdi32
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
GetStockObject
GetDeviceCaps
CreatePen
SetStretchBltMode
GetBkColor
GetTextColor
CreateRectRgnIndirect
CreateFontIndirectA
Escape
GetMapMode
GetTextExtentPoint32A
GetRgnBox
CreateRectRgn
CreateCompatibleDC
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateSolidBrush
CreateCompatibleBitmap
PatBlt
SetBrushOrgEx
CreatePatternBrush
BitBlt
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
CombineRgn
GetObjectA
SetPixel
StretchBlt
SetDIBits
GetDIBits
GetCurrentObject
Rectangle
CreateDIBSection
GetPixel
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
shell32
DragQueryFileA
ShellExecuteA
DragFinish
comctl32
ImageList_GetImageInfo
ord17
ImageList_Destroy
_TrackMouseEvent
ImageList_Draw
shlwapi
PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromString
oleaut32
OleCreateFontIndirect
SysAllocStringByteLen
SysStringLen
VariantChangeType
SysFreeString
SysAllocStringLen
VariantClear
VariantInit
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
client_io
?send_packet@io_proxy@@QAEXPADII@Z
?connect@io_proxy@@QAEXXZ
?add_xy_handler@io_proxy@@QAEXPAV?$protocol_handler@Vio_proxy@@@@@Z
?is_valid@io_proxy@@QBE_NXZ
??0io_proxy@@QAE@PBDK@Z
??1io_proxy@@UAE@XZ
?release_packet@io_proxy@@QAEXPAD@Z
?close@io_proxy@@QAEXXZ
?alloc_packet@io_proxy@@QAEPADPAX@Z
?alloc_size@io_proxy@@QBEIPAX@Z
?choose_allocator@io_proxy@@QAEPAXI@Z
?is_connected@io_proxy@@QBE_NXZ
chat
?create@chat@@QAE_NPAUHWND__@@I@Z
?enable_sound@chat@@QAEX_N@Z
?hwnd@chat@@QBEPAUHWND__@@XZ
?set_self_id@chat@@QAEXI@Z
?add_msg@chat@@QAEXPBDW4msg_type@1@@Z
?handle_protocol@chat@@QAE_NAAVio_proxy@@IAAVbistream@@@Z
??0chat@@QAE@PAVio_proxy@@PAVplayer_list@@@Z
??1chat@@UAE@XZ
player_list
?set_self_id@player_list@@QAEXI@Z
?remove_player@player_list@@QAEXI@Z
?add_player@player_list@@QAEXPBV?$player_t@Vio_proxy@@@@@Z
?get_player@player_list@@QAEPAV?$player_t@Vio_proxy@@@@I@Z
??1player_list@@UAE@XZ
??0player_list@@QAE@PAVio_proxy@@PAVchat@@@Z
?handle_protocol@player_list@@QAE_NAAVio_proxy@@IAAVbistream@@@Z
?create@player_list@@QAE_NPAUHWND__@@I@Z
?set_visible@player_list@@QAEXW4player_list_column@@_N@Z
?hwnd@player_list@@QBEPAUHWND__@@XZ
videomanager
??0CVideoManager@@QAE@XZ
?Init@CVideoManager@@QAEXHHPAVCWnd@@@Z
?SetWndsPos@CVideoManager@@QAEXQAVCRect@@H@Z
??1CVideoManager@@QAE@XZ
?AddPlayer@CVideoManager@@QAEXAAUvPlayer@@@Z
dsound
ord1
skin
?SetHook@@YA_NPAUHWND__@@@Z
bscrashrpt
Install2
Uninstall
Sections
.text Size: 504KB - Virtual size: 502KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 128KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ