Static task
static1
Behavioral task
behavioral1
Sample
三国志Ⅱ--霸王的大陆1.2/霸王的大陆.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
三国志Ⅱ--霸王的大陆1.2/霸王的大陆.exe
Resource
win10v2004-20220812-en
General
-
Target
7eff736e2cd31d11dee6036387cf70e04e56ee99c79b555fa5b1e3b7ad530743
-
Size
381KB
-
MD5
c44aad0adb5864425ebb5c5ec404c52e
-
SHA1
3f4741e47e61ad7cf1172401618c6ad930f49918
-
SHA256
7eff736e2cd31d11dee6036387cf70e04e56ee99c79b555fa5b1e3b7ad530743
-
SHA512
506fbebfaa224eacada1b9e3625bcbc6cf8885e8b245bdea3216f14e27aeda10ad3805bfa6d16f414f7795c5c7d9e62fc577959ffb36da22e864b727503ac976
-
SSDEEP
6144:8KwVcMG2Vd6x8wiTyHhMi5t40uKYHesTgaAWaKJ1rAsoSBBSqdSCa8JjoR8pJuNk:dwVcMGmcmfyHOuFuKsKWaKJ1HHTdLa8B
Malware Config
Signatures
Files
-
7eff736e2cd31d11dee6036387cf70e04e56ee99c79b555fa5b1e3b7ad530743.7z
-
三国志Ⅱ--霸王的大陆1.2/20130303修正.gif
-
三国志Ⅱ--霸王的大陆1.2/BUG 修正.gif.gif
-
三国志Ⅱ--霸王的大陆1.2/V1.2 说明.txt
-
三国志Ⅱ--霸王的大陆1.2/刘备.gif
-
三国志Ⅱ--霸王的大陆1.2/霸王的大陆.exe.exe windows x86
ce2b49c5b0a80ce1efc21342644d634f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
WritePrivateProfileStructA
ReleaseMutex
FreeLibrary
GetPrivateProfileStructA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameA
GetCurrentThreadId
GetLocalTime
SizeofResource
QueryPerformanceFrequency
CreateFileA
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
CloseHandle
CreateEventA
CreateMutexA
GetLastError
SetEvent
HeapAlloc
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
GetProcAddress
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetOEMCP
GetACP
GetCPInfo
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
HeapSize
HeapReAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
HeapFree
RaiseException
CreateThread
RtlUnwind
LeaveCriticalSection
DeleteCriticalSection
InterlockedExchange
InitializeCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
LoadLibraryA
LockResource
LoadResource
FindResourceA
Sleep
SetEndOfFile
WriteFile
SetThreadPriority
CreateDirectoryA
WaitForSingleObject
ResetEvent
user32
LoadIconA
SendDlgItemMessageA
GetWindowPlacement
EndDialog
LoadStringA
CreateDialogParamA
DestroyWindow
PostQuitMessage
DrawMenuBar
SendMessageA
IsDlgButtonChecked
DestroyMenu
GetWindowRect
CallNextHookEx
SetDlgItemTextA
DialogBoxParamA
UnhookWindowsHookEx
SetWindowsHookExA
IsDialogMessageA
FindWindowA
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
DeleteMenu
InsertMenuA
GetDlgItemInt
CheckRadioButton
GetMenuState
EnableMenuItem
GetMenuStringA
ModifyMenuA
SetWindowPlacement
SetForegroundWindow
RedrawWindow
SetCursor
wsprintfA
BeginPaint
EndPaint
GetMenuItemCount
GetMenuItemID
GetDlgItem
GetWindowLongA
SetMenu
GetMenu
CheckMenuItem
IsWindow
LoadCursorA
RegisterClassExA
CreateWindowExA
GetCursorPos
ClientToScreen
SetRect
MessageBoxA
GetDC
ReleaseDC
SetWindowTextA
InvalidateRect
GetWindowTextA
ShowWindow
SetWindowLongA
GetParent
KillTimer
SetTimer
DefWindowProcA
GetDlgItemTextA
ScreenToClient
TrackPopupMenu
GetClientRect
PostMessageA
SetWindowPos
CheckDlgButton
GetSystemMetrics
EnableWindow
LoadMenuA
GetSubMenu
gdi32
StretchDIBits
ExtTextOutA
SetBkColor
CreatePalette
GetSystemPaletteEntries
DeleteObject
RealizePalette
SelectPalette
AnimatePalette
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ShellExecuteA
DragAcceptFiles
ole32
CoInitialize
CoUninitialize
CoCreateInstance
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
comctl32
ImageList_LoadImageA
ImageList_Destroy
ord17
imm32
ImmAssociateContext
wsock32
setsockopt
accept
recv
send
socket
htonl
htons
bind
closesocket
WSAAsyncSelect
listen
ioctlsocket
inet_ntoa
connect
WSAGetLastError
WSAStartup
WSACleanup
Sections
.text Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 807KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 564KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ