Static task
static1
Behavioral task
behavioral1
Sample
三国志Ⅱ--霸王的大陆1.3纯净版/三国志Ⅱ-霸王大陆20周年纪念版.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
三国志Ⅱ--霸王的大陆1.3纯净版/三国志Ⅱ-霸王大陆20周年纪念版.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
三国志Ⅱ--霸王的大陆1.3纯净版/霸王的大陆1.3纯净版.exe
Resource
win7-20220901-en
Behavioral task
behavioral4
Sample
三国志Ⅱ--霸王的大陆1.3纯净版/霸王的大陆1.3纯净版.exe
Resource
win10v2004-20220812-en
General
-
Target
d159d2ac34bc3b76b80248d4a83a30675263db38f4b6fd1d389ca3c6acd78372
-
Size
3.1MB
-
MD5
b88c5c8382aca804eba5a2c83ef8470b
-
SHA1
316536c91108696cc60e7f5c28bc1ea5640cf09b
-
SHA256
d159d2ac34bc3b76b80248d4a83a30675263db38f4b6fd1d389ca3c6acd78372
-
SHA512
0fc4708f3767cd05512afd42dae70e4a8da88415fbfeec0753cf0e805f236969946053cfac9da025f30ea1957682c21c25ab104559f3707649e89133396aa80d
-
SSDEEP
98304:EkreDbmo0teB/aOopAQa0wFFhi0IjSaFlFz:ElqXMToyp+SSj
Malware Config
Signatures
Files
-
d159d2ac34bc3b76b80248d4a83a30675263db38f4b6fd1d389ca3c6acd78372.7z
-
三国志Ⅱ--霸王的大陆1.3纯净版/1.3纯净版说明.txt
-
三国志Ⅱ--霸王的大陆1.3纯净版/★【龙年献礼】★《三国志Ⅱ-霸王大陆》20周年纪念版.txt
-
三国志Ⅱ--霸王的大陆1.3纯净版/三国志Ⅱ-霸王大陆20周年纪念版.exe.exe windows x86
ce2b49c5b0a80ce1efc21342644d634f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
WritePrivateProfileStructA
ReleaseMutex
FreeLibrary
GetPrivateProfileStructA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameA
GetCurrentThreadId
GetLocalTime
SizeofResource
QueryPerformanceFrequency
CreateFileA
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
CloseHandle
CreateEventA
CreateMutexA
GetLastError
SetEvent
HeapAlloc
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
GetProcAddress
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetOEMCP
GetACP
GetCPInfo
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
HeapSize
HeapReAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
HeapFree
RaiseException
CreateThread
RtlUnwind
LeaveCriticalSection
DeleteCriticalSection
InterlockedExchange
InitializeCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
LoadLibraryA
LockResource
LoadResource
FindResourceA
Sleep
SetEndOfFile
WriteFile
SetThreadPriority
CreateDirectoryA
WaitForSingleObject
ResetEvent
user32
LoadIconA
SendDlgItemMessageA
GetWindowPlacement
EndDialog
LoadStringA
CreateDialogParamA
DestroyWindow
PostQuitMessage
DrawMenuBar
SendMessageA
IsDlgButtonChecked
DestroyMenu
GetWindowRect
CallNextHookEx
SetDlgItemTextA
DialogBoxParamA
UnhookWindowsHookEx
SetWindowsHookExA
IsDialogMessageA
FindWindowA
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
DeleteMenu
InsertMenuA
GetDlgItemInt
CheckRadioButton
GetMenuState
EnableMenuItem
GetMenuStringA
ModifyMenuA
SetWindowPlacement
SetForegroundWindow
RedrawWindow
SetCursor
wsprintfA
BeginPaint
EndPaint
GetMenuItemCount
GetMenuItemID
GetDlgItem
GetWindowLongA
SetMenu
GetMenu
CheckMenuItem
IsWindow
LoadCursorA
RegisterClassExA
CreateWindowExA
GetCursorPos
ClientToScreen
SetRect
MessageBoxA
GetDC
ReleaseDC
SetWindowTextA
InvalidateRect
GetWindowTextA
ShowWindow
SetWindowLongA
GetParent
KillTimer
SetTimer
DefWindowProcA
GetDlgItemTextA
ScreenToClient
TrackPopupMenu
GetClientRect
PostMessageA
SetWindowPos
CheckDlgButton
GetSystemMetrics
EnableWindow
LoadMenuA
GetSubMenu
gdi32
StretchDIBits
ExtTextOutA
SetBkColor
CreatePalette
GetSystemPaletteEntries
DeleteObject
RealizePalette
SelectPalette
AnimatePalette
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ShellExecuteA
DragAcceptFiles
ole32
CoInitialize
CoUninitialize
CoCreateInstance
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
comctl32
ImageList_LoadImageA
ImageList_Destroy
ord17
imm32
ImmAssociateContext
wsock32
setsockopt
accept
recv
send
socket
htonl
htons
bind
closesocket
WSAAsyncSelect
listen
ioctlsocket
inet_ntoa
connect
WSAGetLastError
WSAStartup
WSACleanup
Sections
.text Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 807KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 564KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
三国志Ⅱ--霸王的大陆1.3纯净版/原版修正图/1.3版本武器美化本版本已还原原版.JPG.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/原版修正图/侯成,向宠.JPG.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/原版修正图/典韦,武安国,蒋义渠.JPG.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/原版修正图/地名修正.JPG.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/原版修正图/董茶那,李珪,李堪.JPG.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/原版修正图/贾诩,张郃,李傕.JPG.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/原版修正图/青釭,蒯越.JPG.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/地图路线代码/城池坐标修改教程.JPG.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/地图路线代码/霸王的大陆 路线图(冷然御风切).JPG.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/彩色说明书/升级相关.jpg.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/彩色说明书/战场相关.jpg.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/彩色说明书/普通武器.jpg.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/彩色说明书/极品武器.jpg.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/彩色说明书/特殊谋士.jpg.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/彩色说明书/计策一览.jpg.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/彩色说明书/霸王封面.jpg.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/游戏秘籍.JPG.jpg
-
三国志Ⅱ--霸王的大陆1.3纯净版/霸王的大陆1.3纯净版.exe.exe windows x86
ce2b49c5b0a80ce1efc21342644d634f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WritePrivateProfileStringA
WritePrivateProfileStructA
ReleaseMutex
FreeLibrary
GetPrivateProfileStructA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameA
GetCurrentThreadId
GetLocalTime
SizeofResource
QueryPerformanceFrequency
CreateFileA
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
CloseHandle
CreateEventA
CreateMutexA
GetLastError
SetEvent
HeapAlloc
SetFilePointer
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
ReadFile
GetProcAddress
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetOEMCP
GetACP
GetCPInfo
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
HeapSize
HeapReAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
HeapFree
RaiseException
CreateThread
RtlUnwind
LeaveCriticalSection
DeleteCriticalSection
InterlockedExchange
InitializeCriticalSection
EnterCriticalSection
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
FlushFileBuffers
LoadLibraryA
LockResource
LoadResource
FindResourceA
Sleep
SetEndOfFile
WriteFile
SetThreadPriority
CreateDirectoryA
WaitForSingleObject
ResetEvent
user32
LoadIconA
SendDlgItemMessageA
GetWindowPlacement
EndDialog
LoadStringA
CreateDialogParamA
DestroyWindow
PostQuitMessage
DrawMenuBar
SendMessageA
IsDlgButtonChecked
DestroyMenu
GetWindowRect
CallNextHookEx
SetDlgItemTextA
DialogBoxParamA
UnhookWindowsHookEx
SetWindowsHookExA
IsDialogMessageA
FindWindowA
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
DeleteMenu
InsertMenuA
GetDlgItemInt
CheckRadioButton
GetMenuState
EnableMenuItem
GetMenuStringA
ModifyMenuA
SetWindowPlacement
SetForegroundWindow
RedrawWindow
SetCursor
wsprintfA
BeginPaint
EndPaint
GetMenuItemCount
GetMenuItemID
GetDlgItem
GetWindowLongA
SetMenu
GetMenu
CheckMenuItem
IsWindow
LoadCursorA
RegisterClassExA
CreateWindowExA
GetCursorPos
ClientToScreen
SetRect
MessageBoxA
GetDC
ReleaseDC
SetWindowTextA
InvalidateRect
GetWindowTextA
ShowWindow
SetWindowLongA
GetParent
KillTimer
SetTimer
DefWindowProcA
GetDlgItemTextA
ScreenToClient
TrackPopupMenu
GetClientRect
PostMessageA
SetWindowPos
CheckDlgButton
GetSystemMetrics
EnableWindow
LoadMenuA
GetSubMenu
gdi32
StretchDIBits
ExtTextOutA
SetBkColor
CreatePalette
GetSystemPaletteEntries
DeleteObject
RealizePalette
SelectPalette
AnimatePalette
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ShellExecuteA
DragAcceptFiles
ole32
CoInitialize
CoUninitialize
CoCreateInstance
winmm
timeEndPeriod
timeBeginPeriod
timeGetTime
comctl32
ImageList_LoadImageA
ImageList_Destroy
ord17
imm32
ImmAssociateContext
wsock32
setsockopt
accept
recv
send
socket
htonl
htons
bind
closesocket
WSAAsyncSelect
listen
ioctlsocket
inet_ntoa
connect
WSAGetLastError
WSAStartup
WSACleanup
Sections
.text Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 807KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 564KB - Virtual size: 560KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ