Static task
static1
Behavioral task
behavioral1
Sample
4279ec213ba3c2fc912df99af201ab13af158fef21294d85778bf5ebfa8a920f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4279ec213ba3c2fc912df99af201ab13af158fef21294d85778bf5ebfa8a920f.exe
Resource
win10v2004-20220812-en
General
-
Target
4279ec213ba3c2fc912df99af201ab13af158fef21294d85778bf5ebfa8a920f
-
Size
232KB
-
MD5
93e6d01fee0b864b0ff93ec2008a8710
-
SHA1
da06b7ff150935ed08932bb9ff0a32bb6c55dbcf
-
SHA256
4279ec213ba3c2fc912df99af201ab13af158fef21294d85778bf5ebfa8a920f
-
SHA512
e7ed1ce66658446dacb5ad3ed46f942c5f80f2b56f75ac61f2ecfbaec33a2f5810d470db4afd284b98c797fa94b31c0bfb5d057e0c21d0de88063334283f191f
-
SSDEEP
6144:eOxw95wbanb+im7DkklW7qCUeMqLZ8pRdKRqVyPliv1YSsQLH5AdG:eOq9Uc7q8qAdBSsPdG
Malware Config
Signatures
Files
-
4279ec213ba3c2fc912df99af201ab13af158fef21294d85778bf5ebfa8a920f.exe windows x86
3e4f8fa828fd7d6fa6573712663e56ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetProcAddress
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetOEMCP
GetCPInfo
WriteFile
GetStdHandle
UnhandledExceptionFilter
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadReadPtr
IsBadCodePtr
SetFilePointer
LoadLibraryA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
CloseHandle
GetModuleHandleA
lstrcpyA
GetModuleFileNameA
GetCurrentThreadId
Sleep
GetTickCount
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
IsDBCSLeadByte
DeleteCriticalSection
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
InitializeCriticalSection
SetUnhandledExceptionFilter
HeapDestroy
HeapReAlloc
HeapSize
RtlUnwind
ExitProcess
user32
LoadIconA
GetActiveWindow
DialogBoxParamA
CallWindowProcA
SetCursor
LoadCursorA
PostMessageA
GetCapture
OffsetRect
GetParent
IsWindow
PtInRect
FlashWindow
GetWindowRect
CreateWindowExA
SetRect
ReleaseCapture
FillRect
DrawTextA
GetSystemMetrics
GetWindowLongA
SetWindowLongA
GetDlgItem
SetFocus
KillTimer
SetTimer
ShowWindow
InvalidateRect
EndPaint
BeginPaint
GetClientRect
MoveWindow
SetWindowTextA
SendMessageA
EndDialog
DefWindowProcA
UnregisterClassA
DestroyWindow
gdi32
DeleteObject
CreateCompatibleDC
SelectObject
StretchBlt
BitBlt
GetStockObject
DeleteDC
CreateFontIndirectA
CreateSolidBrush
SetBkMode
SetTextColor
shell32
ShellExecuteA
asdeatlgameframe
?AsdeForceExitApplication@@YAJHH@Z
?BlockRecv@CMainFrame@@QAEHXZ
?UnBlockRecv@CMainFrame@@QAEHH@Z
?SendFrameOperation@CMainFrame@@QAEHIJAAJ@Z
?AllocLayers@CViewManager@@QAEXG@Z
?DisplayStartupText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
?BuildPlayerListCtrlColumn@CMainFrame@@QAEJJPAUPLColumnInfo@@@Z
?LoadSkin@CSkinResouce@@SAPAV1@PAD@Z
?GetDeskViewUnit@CMainFrame@@QAEPAVCViewUnit@@XZ
?GetCmdPlayerInfoAtServerSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?GetGameSaveHandle@CMainFrame@@QAEPAVCGameSave@@XZ
?GetJFDWString@@YAPBD_JAAF@Z
?Attach@CTextUnit@@QAEJAAUtagRECT@@PAVCViewManager@@GGPAVCDevice@@KPAUHFONT__@@IHKKK@Z
?ApplyText@CTextUnit@@QAEXPAD@Z
??0CDDrawSurface@@QAE@XZ
??0CDDrawSurface@@QAE@PAUIDirectDrawSurface@@@Z
?DoModal@CDialog@@QAEHPAUHWND__@@J@Z
??1CDDrawSurface@@QAE@XZ
?CMainFrame_DisConstruct@CMainFrame@@CAXPAV1@@Z
?CMainFrame_Construct@CMainFrame@@CAXPAV1@PADFAAVCMainFrameTraits@@W4AD_GAME_TYPE@@@Z
?ProcessWindowMessage@CMainFrame@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessSocketXieYi@CMainFrame@@UAEHIAAVbistream@Win32Tools@@AAJK@Z
?ProcessFrameEvent@CMainFrame@@UAEHIJAAJ@Z
?CDialog_DisConstruct@CDialog@@CAXPAV1@@Z
?CDialog_Construct@CDialog@@CAXPAV1@IPBD@Z
?ProcessWindowMessage@CDialog@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessFrameEvent@CDialog@@UAEHIJAAJ@Z
?ProcessWindowMessage@CSkinCheckBox@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinButton@@UAEHPAUHWND__@@IIJAAJK@Z
?Attach@CSingleUnit2@@QAEJPAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@2@Z
?SendPackage@CMainFrame@@QAEHPADG_N@Z
?ReDraw@CViewManager@@QAEJPAVCDevice@@@Z
?Present@CDisplay@@QAEJXZ
?GetMyInfo@CMainFrame@@QAEPAUPLAYERINFO@@XZ
?ClientToGameRect@CMainFrame@@QAEXPAUtagPOINT@@@Z
?FreeSkin@CSkinResouce@@SAXAAPAV1@@Z
?Attach@CSingleUnit@@QAEJPAVCViewManager@@GGIPAVCImageResource@@1@Z
?LVMoveTo@CViewUnit@@QAEXHHH@Z
?CreateFromBitmap@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?CreateFromPng@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?CreateFromGif@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?CreateFromJpeg@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?LVChangeRect@CViewUnit@@QAEXHHHHH@Z
?OnDraw@CSingleUnit2@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?DisplayChatText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@0H@Z
?CTextUnit_DisConstruct@CTextUnit@@CAXPAV1@@Z
?CTextUnit_Construct@CTextUnit@@CAXPAV1@@Z
?OnDraw@CTextUnit@@EAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDetchFrom@CTextUnit@@EAEXPAUCViewLayer@@PAUCViewArea@@@Z
?OnDrawText@CTextUnit@@UAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
?GetCmdInfo@CMainFrame@@QAEAAUCMDINFO@@XZ
?SeatClientToServer@CMainFrame@@QAEFF@Z
?GetViewManager@CMainFrame@@QAEPAVCViewManager@@XZ
?GetDrawDevice@CMainFrame@@QAEPAVCDevice@@XZ
?LoadVisualize@@YAHAAPAUHBITMAP__@@HHHHHPAPAU1@@Z
?GetDDSurf@CDDrawSurface@@QAEPAUIDirectDrawSurface@@XZ
?Destroy@CDDrawSurface@@QAEJXZ
?GetCmdPlayerInfoAtClientSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?CreateFromHANDLE@CDDrawSurface@@QAEJPAVCDisplay@@PAUHBITMAP__@@KK@Z
?AsdeSetSkin@@YAPAVCSkinResouce@@PAV1@@Z
?GetGameRect@CMainFrame@@QAEXPAUtagRECT@@@Z
?SeatServerToClient@CMainFrame@@QAEFF@Z
?GetSoundManager@CMainFrame@@QAEPAVCSoundManager@@XZ
?PlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?CreateOgg@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?AsdeInitApplication@@YAJPAUHINSTANCE__@@HPBD111J@Z
?Create@CMainFrame@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBDKKV_U_MENUorID@4@PAX@Z
?AsdeTimerRunApplication@@YAJHK@Z
?AsdeUnInitApplication@@YAXXZ
?LoadImageA@CImageResource@@SAPAUHBITMAP__@@PBDKK@Z
?SubClass@CSkinButton@@QAEXPAUHWND__@@@Z
?SubClass@CSkinCheckBox@@QAEXPAUHWND__@@@Z
?GetUIFace@CSkinResouce@@QAEPAVCFaceUI@@PBD0@Z
?SetSkin@CSkinButton@@QAEXPAVCFaceButton@@@Z
?SetSkin@CSkinCheckBox@@QAEXPAVCFaceCheckBox@@@Z
?OnOk@CDialog@@QAEJGGPAUHWND__@@AAH@Z
?DetchSelf@CViewUnit@@QAEXXZ
?BltAlpha@CDDrawRender@@QAEJKKPAVCDDrawSurface@@0PAUtagRECT@@0KK@Z
?ReSetRect@CViewUnit@@QAEXHHHH@Z
?LVShow@CViewUnit@@QAEXEH@Z
?LVRefresh@CViewUnit@@QAEXH@Z
?GetBackBuffer@CDisplay@@QAEPAVCDDrawSurface@@XZ
??1CViewRect@@QAE@XZ
?GetDDSC@CDDrawSurface@@QAEAAU_DDSURFACEDESC@@XZ
?ReSetRect@CViewUnit@@QAEXAAUtagRECT@@@Z
?AttachUnit@CViewManager@@QAEXPAVCViewUnit@@GG@Z
??1CDDrawRender@@QAE@XZ
?Blt@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@K@Z
??0CDDrawRender@@QAE@PAVCDDrawSurface@@@Z
?__init__@CViewUnit@@AAEXHHHHE@Z
?OnDraw@CSingleUnit@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?RePlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
??0CViewRect@@QAE@XZ
ruleedit
?GetNumericConfig@CRuleConfig@@QAEHIAA_J_J@Z
?PraseRuleString@CRuleConfig@@QAEHPBD0@Z
??1CRuleConfig@@QAE@XZ
??0CRuleConfig@@QAE@XZ
gamesave
?SnapStep@CGameSave@@QAEHIAAGAAK1AAPAD@Z
Sections
.text Size: 144KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ