Static task
static1
Behavioral task
behavioral1
Sample
a32645a943161d9a0ed9d49b4737908a97bf8c97b671942da6500276be42a39c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a32645a943161d9a0ed9d49b4737908a97bf8c97b671942da6500276be42a39c.exe
Resource
win10v2004-20220812-en
General
-
Target
a32645a943161d9a0ed9d49b4737908a97bf8c97b671942da6500276be42a39c
-
Size
224KB
-
MD5
82508637eef78d7d172605464ba64a40
-
SHA1
07f0374713fec50293d14be339efd1abaa865988
-
SHA256
a32645a943161d9a0ed9d49b4737908a97bf8c97b671942da6500276be42a39c
-
SHA512
3275e4508da0068deb42f3c8719d389ede49cf652af0ebaa20d340220ee07cc405201815669cc30d4e1829b4a917720bc33004d4f43eb3d6cbe3d1842bd2f9dc
-
SSDEEP
6144:gp7wLUwsIkpx/E5BvcV59T/uJdp7vnv35SMK1KdEI1CDEgzo0naG+:gFbAskdR1OpPaG+
Malware Config
Signatures
Files
-
a32645a943161d9a0ed9d49b4737908a97bf8c97b671942da6500276be42a39c.exe windows x86
25fa1d26e8d96eb8ddfe3aaa6e32a597
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemInfo
VirtualQuery
GetCurrentProcessId
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapCreate
VirtualFree
IsBadWritePtr
TerminateProcess
VirtualAlloc
VirtualProtect
GetSystemTimeAsFileTime
ExitProcess
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
CloseHandle
WriteFile
FlushFileBuffers
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
RaiseException
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer
SetStdHandle
IsBadReadPtr
GetLastError
MultiByteToWideChar
lstrcpynA
WritePrivateProfileStringA
lstrcpyA
GetModuleFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetCurrentThreadId
WideCharToMultiByte
GetTickCount
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
QueryPerformanceCounter
user32
DefWindowProcA
EndDialog
GetWindowLongA
EnableWindow
UnregisterClassA
DialogBoxParamA
SendMessageA
CallWindowProcA
GetForegroundWindow
FillRect
PtInRect
GetCapture
ReleaseCapture
OffsetRect
SetCursor
LoadCursorA
GetActiveWindow
SetCapture
SetWindowLongA
DestroyWindow
PostMessageA
SetRect
DrawTextA
GetWindow
GetWindowRect
SystemParametersInfoA
MapWindowPoints
SetWindowPos
GetDlgItem
GetParent
SetFocus
KillTimer
SetTimer
RedrawWindow
ShowWindow
ReleaseDC
GetDC
EndPaint
BeginPaint
GetClientRect
MoveWindow
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
FlashWindow
gdi32
StretchBlt
CreateFontIndirectA
CreateFontA
CreatePatternBrush
CreateSolidBrush
DeleteDC
SelectObject
CreateCompatibleDC
BitBlt
DeleteObject
SetBkMode
SetTextColor
GetStockObject
comdlg32
GetOpenFileNameA
GetSaveFileNameA
ChooseColorA
shell32
ShellExecuteA
ruleedit
?GetNumericConfig@CRuleConfig@@QAEHIAA_J_J@Z
?PraseRuleString@CRuleConfig@@QAEHPBD0@Z
??1CRuleConfig@@QAE@XZ
??0CRuleConfig@@QAE@XZ
asdeatlgameframe
?AsdeInitApplication@@YAJPAUHINSTANCE__@@HPBD111J@Z
??1CDDrawSurface@@QAE@XZ
??0CDDrawSurface@@QAE@XZ
?GetCmdPlayerInfoAtServerSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?DisplayChatText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@0H@Z
?SendFrameOperation@CMainFrame@@QAEHIJAAJ@Z
?AllocLayers@CViewManager@@QAEXG@Z
?LoadSkin@CSkinResouce@@SAPAV1@PAD@Z
?BuildPlayerListCtrlColumn@CMainFrame@@QAEJJPAUPLColumnInfo@@@Z
?Create@CDDrawSurface@@QAEJPAVCDisplay@@PAU_DDSURFACEDESC@@@Z
?Blt@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@K@Z
?LockDC@CDDrawSurface@@QAEPAUHDC__@@XZ
?UnlockDC@CDDrawSurface@@QAEJPAUHDC__@@@Z
?BlockRecv@CMainFrame@@QAEHXZ
?UnBlockRecv@CMainFrame@@QAEHH@Z
?AsdeForceExitApplication@@YAJHH@Z
?CMainFrame_DisConstruct@CMainFrame@@CAXPAV1@@Z
?CMainFrame_Construct@CMainFrame@@CAXPAV1@PADFAAVCMainFrameTraits@@W4AD_GAME_TYPE@@@Z
?ProcessWindowMessage@CMainFrame@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessSocketXieYi@CMainFrame@@UAEHIAAVbistream@Win32Tools@@AAJK@Z
?ProcessFrameEvent@CMainFrame@@UAEHIJAAJ@Z
?ProcessWindowMessage@CSkinCheckBox@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinButton@@UAEHPAUHWND__@@IIJAAJK@Z
?SeatClientToServer@CMainFrame@@QAEFF@Z
?ReSetRect@CViewUnit@@QAEXHHHH@Z
?Attach@CSingleUnit2@@QAEJAAUtagRECT@@PAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@3@Z
?GetDeskViewUnit@CMainFrame@@QAEPAVCViewUnit@@XZ
?AttachUnit@CViewManager@@QAEXPAVCViewUnit@@GG@Z
?SendPackage@CMainFrame@@QAEHPADG_N@Z
?PlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?GetMyInfo@CMainFrame@@QAEPAUPLAYERINFO@@XZ
?GetCmdInfo@CMainFrame@@QAEAAUCMDINFO@@XZ
?LVMoveTo@CViewUnit@@QAEXHHH@Z
?GetViewManager@CMainFrame@@QAEPAVCViewManager@@XZ
?Attach@CSingleUnit2@@QAEJPAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@2@Z
?Attach@CSingleUnit@@QAEJPAVCViewManager@@GGIPAVCImageResource@@1@Z
?ApplyText@CTextUnit@@QAEXPAD@Z
?Attach@CTextUnit@@QAEJAAUtagRECT@@PAVCViewManager@@GGPAVCDevice@@KPAUHFONT__@@IHKKK@Z
?FreeSkin@CSkinResouce@@SAXAAPAV1@@Z
?SeatServerToClient@CMainFrame@@QAEFF@Z
?LoadImageA@CImageResource@@SAPAUHBITMAP__@@PBDKK@Z
?LVShow@CViewUnit@@QAEXEH@Z
?LVRefresh@CViewUnit@@QAEXH@Z
?GetBackBuffer@CDisplay@@QAEPAVCDDrawSurface@@XZ
??0CDDrawRender@@QAE@PAVCDDrawSurface@@@Z
?BltAlpha@CDDrawRender@@QAEJKKPAVCDDrawSurface@@0PAUtagRECT@@0KK@Z
??1CDDrawRender@@QAE@XZ
?LVChangeRect@CViewUnit@@QAEXHHHHH@Z
?ReSetRect@CViewUnit@@QAEXAAUtagRECT@@@Z
?OnDraw@CSingleUnit2@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDraw@CSingleUnit@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?CTextUnit_DisConstruct@CTextUnit@@CAXPAV1@@Z
?CTextUnit_Construct@CTextUnit@@CAXPAV1@@Z
?OnDraw@CTextUnit@@EAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDetchFrom@CTextUnit@@EAEXPAUCViewLayer@@PAUCViewArea@@@Z
?OnDrawText@CTextUnit@@UAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
??0CViewRect@@QAE@XZ
?__init__@CViewUnit@@AAEXHHHHE@Z
??1CViewRect@@QAE@XZ
?CreateOgg@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?GetDDSurf@CDDrawSurface@@QAEPAUIDirectDrawSurface@@XZ
?GetDrawDevice@CMainFrame@@QAEPAVCDevice@@XZ
?CreateFromJpeg@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?CreateFromBitmap@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?GetGameRect@CMainFrame@@QAEXPAUtagRECT@@@Z
?DetchSelf@CViewUnit@@QAEXXZ
?AsdeSetSkin@@YAPAVCSkinResouce@@PAV1@@Z
?GetSoundManager@CMainFrame@@QAEPAVCSoundManager@@XZ
?SetToEVolume@CSoundManager@@QAEXPAVCSoundBuffer@@@Z
?Destroy@CDDrawSurface@@QAEJXZ
?Create@CMainFrame@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBDKKV_U_MENUorID@4@PAX@Z
?AsdeTimerRunApplication@@YAJHK@Z
?AsdeUnInitApplication@@YAXXZ
?SubClass@CSkinButton@@QAEXPAUHWND__@@@Z
?GetUIFace@CSkinResouce@@QAEPAVCFaceUI@@PBD0@Z
?GetSubUIFace@CFaceUI@@QAEPAV1@PBD0@Z
?SetSkin@CSkinButton@@QAEXPAVCFaceButton@@@Z
?GetBitmap@CGdiBitmap@@QAEPAUHBITMAP__@@XZ
?GetBmpInfo@CGdiBitmap@@QAEAAUtagBITMAP@@XZ
?GetSkinImage@CFaceUI@@QAEPAVCGdiBitmap@@XZ
?SubClass@CSkinCheckBox@@QAEXPAUHWND__@@@Z
?SetColorKey@CDDrawSurface@@QAEJK@Z
?GetDDSC@CDDrawSurface@@QAEAAU_DDSURFACEDESC@@XZ
?BltColorkey@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@@Z
?LVChangeSize@CViewUnit@@QAEXHHHH@Z
??0CDDrawSurface@@QAE@PAUIDirectDrawSurface@@@Z
Sections
.text Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ