93a4bfdf2ba7a2e3a382a170f5a3cccff91f959ac0577f507dd4cc60e67293cd

Sharing

Copy URL Twitter E-mail

General

Target

93a4bfdf2ba7a2e3a382a170f5a3cccff91f959ac0577f507dd4cc60e67293cd
Size

716KB
MD5

805d50a6dd1e6837e0d183ad13e67230
SHA1

c2035ac6e0c247397887e671c44f8b1d7b258165
SHA256

93a4bfdf2ba7a2e3a382a170f5a3cccff91f959ac0577f507dd4cc60e67293cd
SHA512

8200476e2ee1cd962f126dc74b9e9f01962c302c9b36dcc7320c1f55fb90d755b8dfd0cd45e59c9745592e8da84ddbefd19ee9e62f959045edeaa8e666cd7952
SSDEEP

12288:LlcxJir9g0hmeb+qoHnQbIQH+BZvjV/VXC2tSsfswH5ug+cLEYTs8O3+myxbPaGn:LloJ30oeKqjGXowHUg+S/TBs+JPaGn

Score

N/A

Malware Config

Signatures

Files

93a4bfdf2ba7a2e3a382a170f5a3cccff91f959ac0577f507dd4cc60e67293cd
.exe windows x86

f6ee983c9a114e0648427bec2a2e4600

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
FreeEnvironmentStringsW
IsValidCodePage
SetStdHandle
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
FindNextFileA
SetCurrentDirectoryA
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
HeapSize
TerminateProcess
HeapReAlloc
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
FileTimeToLocalFileTime
SetErrorMode
GetFileTime
GetFileAttributesA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentDirectoryA
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
GetTickCount
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
InterlockedDecrement
CloseHandle
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
MulDiv
SetLastError
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LoadLibraryA
FreeLibrary
lstrcatA
lstrcmpW
lstrcpynA
GetModuleHandleA
GetProcAddress
IsDBCSLeadByte
Sleep
GetPrivateProfileIntA
GetPrivateProfileStringA
GetLastError
WritePrivateProfileStringA
WideCharToMultiByte
CreateDirectoryA
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
MultiByteToWideChar
GetThreadLocale
GetVersion
CompareStringW
CompareStringA
RaiseException
lstrcmpiA
lstrlenA
GetVersionExA
GetLocaleInfoA
GetACP
GetLocalTime
SizeofResource
LockResource
LoadResource
FindResourceA
IsValidLocale
GetModuleFileNameA

user32

GetActiveWindow
ValidateRect
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
IsWindowEnabled
SetWindowTextA
IsDialogMessageA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TranslateMessage
TrackPopupMenu
wsprintfA
SetScrollPos
GetScrollPos
SetForegroundWindow
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
AdjustWindowRectEx
GetParent
GetDC
SetWindowRgn
CopyRect
InvalidateRect
GetCapture
EnableWindow
GetClientRect
FillRect
LoadImageA
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
MoveWindow
PostMessageA
EqualRect
GetClassInfoA
RegisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
PostQuitMessage
CreatePopupMenu
RegisterClipboardFormatA
MapDialogRect
SetWindowContextHelpId
SetCursor
IsIconic
GetWindowPlacement
GetSystemMetrics
PtInRect
GetWindow
GetWindowRect
ShowWindow
InflateRect
GetSysColor
RedrawWindow
LoadIconA
SendMessageA
LoadCursorA
GetMessageA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
MessageBoxA
GetDesktopWindow
CharUpperA
UnregisterClassA
UpdateWindow
GetCursorPos
ScreenToClient
SetTimer
KillTimer
ReleaseDC
ShowOwnedPopups
CharNextA
TranslateAcceleratorA
SetMenu
BringWindowToTop
FindWindowA
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
SetRect
IsRectEmpty
PostThreadMessageA
GetSysColorBrush
GetMenuItemInfoA
DestroyCursor
SetCursorPos
SetCapture
LoadMenuA
DestroyMenu
UnpackDDElParam
ReuseDDElParam
SetRectEmpty
LoadAcceleratorsA
InsertMenuItemA
GetKeyState
ReleaseCapture

gdi32

SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreateBitmap
GetStockObject
GetDeviceCaps
CreatePen
SetStretchBltMode
GetBkColor
GetTextColor
CreateRectRgnIndirect
CreateFontIndirectA
Escape
GetMapMode
GetTextExtentPoint32A
GetRgnBox
CreateRectRgn
CreateCompatibleDC
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateSolidBrush
CreateCompatibleBitmap
PatBlt
SetBrushOrgEx
CreatePatternBrush
BitBlt
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
CombineRgn
GetObjectA
SetPixel
StretchBlt
SetDIBits
GetDIBits
GetCurrentObject
Rectangle
CreateDIBSection
GetPixel

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA

shell32

DragQueryFileA
ShellExecuteA
DragFinish

comctl32

ImageList_GetImageInfo
ord17
ImageList_Destroy
_TrackMouseEvent
ImageList_Draw

shlwapi

PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CoTaskMemFree
CoTaskMemAlloc
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CLSIDFromString

oleaut32

OleCreateFontIndirect
SysAllocStringByteLen
SysStringLen
VariantChangeType
SysFreeString
SysAllocStringLen
VariantClear
VariantInit
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

client_io

?send_packet@io_proxy@@QAEXPADII@Z
?connect@io_proxy@@QAEXXZ
?add_xy_handler@io_proxy@@QAEXPAV?$protocol_handler@Vio_proxy@@@@@Z
?is_valid@io_proxy@@QBE_NXZ
??0io_proxy@@QAE@PBDK@Z
??1io_proxy@@UAE@XZ
?release_packet@io_proxy@@QAEXPAD@Z
?close@io_proxy@@QAEXXZ
?alloc_packet@io_proxy@@QAEPADPAX@Z
?alloc_size@io_proxy@@QBEIPAX@Z
?choose_allocator@io_proxy@@QAEPAXI@Z
?is_connected@io_proxy@@QBE_NXZ

chat

?create@chat@@QAE_NPAUHWND__@@I@Z
?enable_sound@chat@@QAEX_N@Z
?hwnd@chat@@QBEPAUHWND__@@XZ
?set_self_id@chat@@QAEXI@Z
?add_msg@chat@@QAEXPBDW4msg_type@1@@Z
?handle_protocol@chat@@QAE_NAAVio_proxy@@IAAVbistream@@@Z
??0chat@@QAE@PAVio_proxy@@PAVplayer_list@@@Z
??1chat@@UAE@XZ

player_list

?set_self_id@player_list@@QAEXI@Z
?remove_player@player_list@@QAEXI@Z
?add_player@player_list@@QAEXPBV?$player_t@Vio_proxy@@@@@Z
?get_player@player_list@@QAEPAV?$player_t@Vio_proxy@@@@I@Z
??1player_list@@UAE@XZ
??0player_list@@QAE@PAVio_proxy@@PAVchat@@@Z
?handle_protocol@player_list@@QAE_NAAVio_proxy@@IAAVbistream@@@Z
?create@player_list@@QAE_NPAUHWND__@@I@Z
?set_visible@player_list@@QAEXW4player_list_column@@_N@Z
?hwnd@player_list@@QBEPAUHWND__@@XZ

videomanager

??0CVideoManager@@QAE@XZ
?Init@CVideoManager@@QAEXHHPAVCWnd@@@Z
?SetWndsPos@CVideoManager@@QAEXQAVCRect@@H@Z
??1CVideoManager@@QAE@XZ
?AddPlayer@CVideoManager@@QAEXAAUvPlayer@@@Z

dsound

ord1

skin

?SetHook@@YA_NPAUHWND__@@@Z

bscrashrpt

Install2
Uninstall

Sections

.text
Size: 504KB - Virtual size: 502KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 128KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6ee983c9a114e0648427bec2a2e4600

Headers

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

version

client_io

chat

player_list

videomanager

dsound

skin

bscrashrpt

Sections

.text Size: 504KB - Virtual size: 502KB

.rdata Size: 128KB - Virtual size: 125KB

.data Size: 20KB - Virtual size: 32KB

.rsrc Size: 60KB - Virtual size: 59KB

.text
Size: 504KB - Virtual size: 502KB

.rdata
Size: 128KB - Virtual size: 125KB

.data
Size: 20KB - Virtual size: 32KB

.rsrc
Size: 60KB - Virtual size: 59KB