Static task
static1
Behavioral task
behavioral1
Sample
1347ffdd3d841dc0480480008fbdab204b848d414da9e05ac2984ac379f5409e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1347ffdd3d841dc0480480008fbdab204b848d414da9e05ac2984ac379f5409e.exe
Resource
win10v2004-20220812-en
General
-
Target
1347ffdd3d841dc0480480008fbdab204b848d414da9e05ac2984ac379f5409e
-
Size
304KB
-
MD5
4b0fe11acecec8a47e3d5bac51d69120
-
SHA1
2545eab28186c3ba5fc5a105e9b157196ed8ee72
-
SHA256
1347ffdd3d841dc0480480008fbdab204b848d414da9e05ac2984ac379f5409e
-
SHA512
411a022fd39cc1af991c66c4067be34b6170ff965f8172145aeb293c03a170ae2b2c0b18e909c9196dd85e7707be57fb39b481690aeecd2892e82d9a07fa8605
-
SSDEEP
6144:2mGcNza5BvmLaj4+bYzNh4twNaHN0YkWJ760zogeovfExMXwly7zo0naGy:/I5pXExMglGPaGy
Malware Config
Signatures
Files
-
1347ffdd3d841dc0480480008fbdab204b848d414da9e05ac2984ac379f5409e.exe windows x86
020cc1d4c9c2fe77207a13df173fa5cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
ExitProcess
RtlUnwind
HeapSize
HeapReAlloc
VirtualQuery
GetModuleHandleA
VirtualAlloc
GetCommandLineA
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStartupInfoA
GetSystemInfo
TerminateProcess
GetOEMCP
GetCPInfo
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetFilePointer
SetStdHandle
FlushFileBuffers
GetLastError
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleFileNameA
lstrcpyA
Sleep
GetCurrentThreadId
WideCharToMultiByte
GetTickCount
HeapAlloc
GetCurrentProcess
FlushInstructionCache
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetProcessHeap
HeapFree
DeleteCriticalSection
InitializeCriticalSection
RaiseException
HeapDestroy
CloseHandle
user32
IntersectRect
IsRectEmpty
SetRect
GetWindow
GetWindowRect
SystemParametersInfoA
GetParent
SetFocus
RedrawWindow
ReleaseDC
GetDC
EndPaint
BeginPaint
GetClientRect
MoveWindow
GetWindowTextLengthA
MapWindowPoints
SetWindowTextA
EndDialog
DrawTextA
GetActiveWindow
DialogBoxParamA
GetDlgItem
PtInRect
PostMessageA
GetCapture
ReleaseCapture
OffsetRect
IsWindow
FlashWindow
FillRect
KillTimer
SetTimer
SetCursor
LoadCursorA
DestroyWindow
CallWindowProcA
GetWindowLongA
SetWindowLongA
DefWindowProcA
UnregisterClassA
SetWindowPos
CreateWindowExA
SendMessageA
ShowWindow
GetWindowTextA
gdi32
GetStockObject
CreateFontIndirectA
CreateFontA
SetTextColor
SetBkMode
CreatePatternBrush
DeleteDC
BitBlt
StretchBlt
SelectObject
CreateCompatibleDC
DeleteObject
shell32
ShellExecuteA
ruleedit
?GetSelectConfig@CRuleConfig@@QAEHIAAHH@Z
?GetNumericConfig@CRuleConfig@@QAEHIAA_J_J@Z
?PraseRuleString@CRuleConfig@@QAEHPBD0@Z
??1CRuleConfig@@QAE@XZ
??0CRuleConfig@@QAE@XZ
gamesave
?SnapStep@CGameSave@@QAEHIAAGAAK1AAPAD@Z
asdeatlgameframe
?SetToEVolume@CSoundManager@@QAEXPAVCSoundBuffer@@@Z
?DisplayChatText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@0H@Z
?GetCmdPlayerInfoAtClientSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?MessageBoxExA@CMainFrame@@QAEHPBD0IHH@Z
?GetDeskViewUnit@CMainFrame@@QAEPAVCViewUnit@@XZ
?GetCmdPlayerInfoAtServerSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
??0CDDrawSurface@@QAE@XZ
??1CDDrawSurface@@QAE@XZ
?CMainFrame_DisConstruct@CMainFrame@@CAXPAV1@@Z
?CMainFrame_Construct@CMainFrame@@CAXPAV1@PADFAAVCMainFrameTraits@@W4AD_GAME_TYPE@@@Z
?ProcessWindowMessage@CMainFrame@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessFrameEvent@CMainFrame@@UAEHIJAAJ@Z
?ProcessWindowMessage@CSkinCheckBox@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinButton@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessSocketXieYi@CMainFrame@@UAEHIAAVbistream@Win32Tools@@AAJK@Z
?PlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?SendPackage@CMainFrame@@QAEHPADG_N@Z
?AttachUnit@CViewManager@@QAEXPAVCViewUnit@@GG@Z
?GetMyServerSeat@CMainFrame@@QAEFXZ
?SeatClientToServer@CMainFrame@@QAEFF@Z
?Attach@CTextUnit@@QAEJAAUtagRECT@@PAVCViewManager@@GGPAVCDevice@@KPAUHFONT__@@IHKKK@Z
?Attach@CSingleUnit2@@QAEJPAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@2@Z
?Attach@CSingleUnit2@@QAEJAAUtagRECT@@PAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@3@Z
?Attach@CSingleUnit@@QAEJPAVCViewManager@@GGIPAVCImageResource@@1@Z
?GetViewManager@CMainFrame@@QAEPAVCViewManager@@XZ
?FreeSkin@CSkinResouce@@SAXAAPAV1@@Z
?BltAlpha@CDDrawRender@@QAEJKKPAVCDDrawSurface@@0PAUtagRECT@@0KK@Z
?OnDraw@CSingleUnit2@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDraw@CSingleUnit@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?CTextUnit_DisConstruct@CTextUnit@@CAXPAV1@@Z
?CTextUnit_Construct@CTextUnit@@CAXPAV1@@Z
?OnDraw@CTextUnit@@EAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDetchFrom@CTextUnit@@EAEXPAUCViewLayer@@PAUCViewArea@@@Z
?OnDrawText@CTextUnit@@UAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
?LVShow@CViewUnit@@QAEXEH@Z
?LVRefresh@CViewUnit@@QAEXH@Z
?GetBackBuffer@CDisplay@@QAEPAVCDDrawSurface@@XZ
??0CDDrawRender@@QAE@PAVCDDrawSurface@@@Z
?Blt@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@K@Z
??1CDDrawRender@@QAE@XZ
?LVChangeRect@CViewUnit@@QAEXHHHHH@Z
?ReSetRect@CViewUnit@@QAEXAAUtagRECT@@@Z
??0CViewRect@@QAE@XZ
?__init__@CViewUnit@@AAEXHHHHE@Z
??1CViewRect@@QAE@XZ
?GetGameSaveHandle@CMainFrame@@QAEPAVCGameSave@@XZ
?ApplyText@CTextUnit@@QAEXPAD@Z
?LVMoveTo@CViewUnit@@QAEXHHH@Z
?LVMove@CViewUnit@@QAEXHHH@Z
?SeatServerToClient@CMainFrame@@QAEFF@Z
?GetMyInfo@CMainFrame@@QAEPAUPLAYERINFO@@XZ
?CreateOgg@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?CreateWave@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?GetDDSurf@CDDrawSurface@@QAEPAUIDirectDrawSurface@@XZ
?GetDrawDevice@CMainFrame@@QAEPAVCDevice@@XZ
?CreateFromBitmap@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?DetchSelf@CViewUnit@@QAEXXZ
?GetGameRect@CMainFrame@@QAEXPAUtagRECT@@@Z
?LoadImageA@CImageResource@@SAPAUHBITMAP__@@PBDKK@Z
?GetCmdInfo@CMainFrame@@QAEAAUCMDINFO@@XZ
?AsdeSetSkin@@YAPAVCSkinResouce@@PAV1@@Z
?GetSoundManager@CMainFrame@@QAEPAVCSoundManager@@XZ
?Destroy@CDDrawSurface@@QAEJXZ
?AsdeInitApplication@@YAJPAUHINSTANCE__@@HPBD111J@Z
?Create@CMainFrame@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBDKKV_U_MENUorID@4@PAX@Z
?AsdeTimerRunApplication@@YAJHK@Z
?AsdeUnInitApplication@@YAXXZ
?UnlockDC@CDDrawSurface@@QAEJPAUHDC__@@@Z
?LockDC@CDDrawSurface@@QAEPAUHDC__@@XZ
?Create@CDDrawSurface@@QAEJPAVCDisplay@@PAU_DDSURFACEDESC@@@Z
?UnBlockRecv@CMainFrame@@QAEHH@Z
?BlockRecv@CMainFrame@@QAEHXZ
?CreateFromHANDLE@CDDrawSurface@@QAEJPAVCDisplay@@PAUHBITMAP__@@KK@Z
?LoadVisualize@@YAHAAPAUHBITMAP__@@HHHHHPAPAU1@@Z
?ReSetRect@CViewUnit@@QAEXHHHH@Z
?BuildPlayerListCtrlColumn@CMainFrame@@QAEJJPAUPLColumnInfo@@@Z
?LoadSkin@CSkinResouce@@SAPAV1@PAD@Z
?AllocLayers@CViewManager@@QAEXG@Z
?GetSkinImage@CFaceUI@@QAEPAVCGdiBitmap@@XZ
?GetBmpInfo@CGdiBitmap@@QAEAAUtagBITMAP@@XZ
?GetBitmap@CGdiBitmap@@QAEPAUHBITMAP__@@XZ
?SetSkin@CSkinButton@@QAEXPAVCFaceButton@@@Z
?GetSubUIFace@CFaceUI@@QAEPAV1@PBD0@Z
?GetUIFace@CSkinResouce@@QAEPAVCFaceUI@@PBD0@Z
?SubClass@CSkinButton@@QAEXPAUHWND__@@@Z
?BltAlphaEx@CDDrawRender@@QAEJKKKKPAVCDDrawSurface@@KK0KK0KK@Z
?LVChangeSize@CViewUnit@@QAEXHHHH@Z
?GetDDSC@CDDrawSurface@@QAEAAU_DDSURFACEDESC@@XZ
?SubClass@CSkinCheckBox@@QAEXPAUHWND__@@@Z
?AsdeForceExitApplication@@YAJHH@Z
Sections
.text Size: 220KB - Virtual size: 217KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ