Static task
static1
Behavioral task
behavioral1
Sample
d6c7cc23df9054a8cf2949a9504b62c3279b143979ad7aef984b59daba081a7d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d6c7cc23df9054a8cf2949a9504b62c3279b143979ad7aef984b59daba081a7d.exe
Resource
win10v2004-20220812-en
General
-
Target
d6c7cc23df9054a8cf2949a9504b62c3279b143979ad7aef984b59daba081a7d
-
Size
280KB
-
MD5
91697a254d84db4ece6552a55ecfe18a
-
SHA1
9664c4bd372ea32b0f72bcbc1902b1c38e404d64
-
SHA256
d6c7cc23df9054a8cf2949a9504b62c3279b143979ad7aef984b59daba081a7d
-
SHA512
1c6b73f2cd3cc49eca1eab399f24ccaa800766a4c4e1a144c0afa8c1aa68681864a997f47f7e701afcf55929a270cafee52f47b37fd71553dd5074b7cd7cdf7d
-
SSDEEP
6144:C/MV16jkjrRf3elT/M/AJMoGr2j+oF2XMBhzLRiLa2x5ji0P0oK2E2mOn5SsQLH+:WSqdBxRiLa2x80soK2EE5SsPdB
Malware Config
Signatures
Files
-
d6c7cc23df9054a8cf2949a9504b62c3279b143979ad7aef984b59daba081a7d.exe windows x86
521daee5819451471f837216ce3e6759
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
VirtualProtect
VirtualAlloc
RtlUnwind
HeapSize
HeapReAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapCreate
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetProcAddress
RaiseException
TerminateProcess
GetOEMCP
GetCPInfo
SetUnhandledExceptionFilter
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
LoadLibraryA
LCMapStringA
LCMapStringW
HeapDestroy
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetFilePointer
SetStdHandle
FlushFileBuffers
GetLastError
MultiByteToWideChar
lstrcpyA
WritePrivateProfileStringA
GetCurrentThreadId
WideCharToMultiByte
GetModuleFileNameA
GetPrivateProfileIntA
GetModuleHandleA
GetTickCount
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
LeaveCriticalSection
EnterCriticalSection
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection
InitializeCriticalSection
GetStringTypeA
CloseHandle
user32
EnableWindow
EndPaint
BeginPaint
EndDialog
DrawTextA
GetActiveWindow
DialogBoxParamA
CreateDialogParamA
GetDlgItem
SendMessageA
CallWindowProcA
MoveWindow
PtInRect
PostMessageA
GetCapture
ReleaseCapture
OffsetRect
IsWindow
FlashWindow
KillTimer
SetTimer
ShowWindow
SetWindowTextA
SetWindowLongA
LoadCursorA
SetCursor
FillRect
UnregisterClassA
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
MapWindowPoints
SetWindowPos
GetWindowLongA
DestroyWindow
DefWindowProcA
gdi32
CreateCompatibleDC
DeleteObject
CreatePatternBrush
SetBkMode
SetTextColor
SelectObject
CreateFontIndirectA
GetStockObject
BitBlt
StretchBlt
DeleteDC
CreateFontA
shell32
ShellExecuteA
ruleedit
?GetNumericConfig@CRuleConfig@@QAEHIAA_J_J@Z
?PraseRuleString@CRuleConfig@@QAEHPBD0@Z
??1CRuleConfig@@QAE@XZ
??0CRuleConfig@@QAE@XZ
gamesave
?SnapStep@CGameSave@@QAEHIAAGAAK1AAPAD@Z
asdeatlgameframe
?AsdeForceExitApplication@@YAJHH@Z
?BltAlphaEx@CDDrawRender@@QAEJKKKKPAVCDDrawSurface@@KK0KK0KK@Z
?GetDDSC@CDDrawSurface@@QAEAAU_DDSURFACEDESC@@XZ
??1CDDrawSurface@@QAE@XZ
??0CDDrawSurface@@QAE@XZ
?GetCmdPlayerInfoAtServerSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?DisplayChatText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@0H@Z
?SendFrameOperation@CMainFrame@@QAEHIJAAJ@Z
?AllocLayers@CViewManager@@QAEXG@Z
?LoadSkin@CSkinResouce@@SAPAV1@PAD@Z
?BuildPlayerListCtrlColumn@CMainFrame@@QAEJJPAUPLColumnInfo@@@Z
?ReSetRect@CViewUnit@@QAEXHHHH@Z
?DeleteSound@CSoundManager@@QAEJAAPAVCSoundBuffer@@@Z
?GetCmdPlayerInfoAtClientSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?Create@CDDrawSurface@@QAEJPAVCDisplay@@PAU_DDSURFACEDESC@@@Z
?Blt@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@K@Z
?LockDC@CDDrawSurface@@QAEPAUHDC__@@XZ
?UnlockDC@CDDrawSurface@@QAEJPAUHDC__@@@Z
?SeatClientToServer@CMainFrame@@QAEFF@Z
?GetDeskViewUnit@CMainFrame@@QAEPAVCViewUnit@@XZ
?AttachUnit@CViewManager@@QAEXPAVCViewUnit@@GG@Z
?CMainFrame_DisConstruct@CMainFrame@@CAXPAV1@@Z
?CMainFrame_Construct@CMainFrame@@CAXPAV1@PADFAAVCMainFrameTraits@@W4AD_GAME_TYPE@@@Z
?ProcessWindowMessage@CMainFrame@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessSocketXieYi@CMainFrame@@UAEHIAAVbistream@Win32Tools@@AAJK@Z
?ProcessFrameEvent@CMainFrame@@UAEHIJAAJ@Z
?ProcessWindowMessage@CSkinCheckBox@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinStatic@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinButton@@UAEHPAUHWND__@@IIJAAJK@Z
?Attach@CTextUnit@@QAEJAAUtagRECT@@PAVCViewManager@@GGPAVCDevice@@KPAUHFONT__@@IHKKK@Z
?GetMyInfo@CMainFrame@@QAEPAUPLAYERINFO@@XZ
?LVMove@CViewUnit@@QAEXHHH@Z
?SendPackage@CMainFrame@@QAEHPADG_N@Z
?Attach@CSingleUnit2@@QAEJAAUtagRECT@@PAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@3@Z
?Attach@CSingleUnit@@QAEJPAVCViewManager@@GGIPAVCImageResource@@1@Z
?ApplyText@CTextUnit@@QAEXPAD@Z
?GetGameSaveHandle@CMainFrame@@QAEPAVCGameSave@@XZ
?FreeSkin@CSkinResouce@@SAXAAPAV1@@Z
?GetViewManager@CMainFrame@@QAEPAVCViewManager@@XZ
?LVMoveTo@CViewUnit@@QAEXHHH@Z
?GetGameRect@CMainFrame@@QAEXPAUtagRECT@@@Z
?OnDrawText@CTextUnit270@@EAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
?LVShow@CViewUnit@@QAEXEH@Z
?LVRefresh@CViewUnit@@QAEXH@Z
?GetBackBuffer@CDisplay@@QAEPAVCDDrawSurface@@XZ
??0CDDrawRender@@QAE@PAVCDDrawSurface@@@Z
?BltAlpha@CDDrawRender@@QAEJKKPAVCDDrawSurface@@0PAUtagRECT@@0KK@Z
??1CDDrawRender@@QAE@XZ
?LVChangeRect@CViewUnit@@QAEXHHHHH@Z
?ReSetRect@CViewUnit@@QAEXAAUtagRECT@@@Z
?OnDraw@CSingleUnit2@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDraw@CSingleUnit@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?CTextUnit_DisConstruct@CTextUnit@@CAXPAV1@@Z
?CTextUnit_Construct@CTextUnit@@CAXPAV1@@Z
?OnDraw@CTextUnit@@EAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDetchFrom@CTextUnit@@EAEXPAUCViewLayer@@PAUCViewArea@@@Z
?OnDrawText@CTextUnit@@UAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
??0CViewRect@@QAE@XZ
?__init__@CViewUnit@@AAEXHHHHE@Z
??1CViewRect@@QAE@XZ
?PlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?CreateOgg@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?GetDDSurf@CDDrawSurface@@QAEPAUIDirectDrawSurface@@XZ
?GetDrawDevice@CMainFrame@@QAEPAVCDevice@@XZ
?CreateFromBitmap@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?GetCmdInfo@CMainFrame@@QAEAAUCMDINFO@@XZ
?SeatServerToClient@CMainFrame@@QAEFF@Z
?AsdeSetSkin@@YAPAVCSkinResouce@@PAV1@@Z
?DetchSelf@CViewUnit@@QAEXXZ
?LoadImageA@CImageResource@@SAPAUHBITMAP__@@PBDKK@Z
?GetSoundManager@CMainFrame@@QAEPAVCSoundManager@@XZ
?SetToEVolume@CSoundManager@@QAEXPAVCSoundBuffer@@@Z
?Destroy@CDDrawSurface@@QAEJXZ
?AsdeInitApplication@@YAJPAUHINSTANCE__@@HPBD111J@Z
?Create@CMainFrame@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBDKKV_U_MENUorID@4@PAX@Z
?AsdeTimerRunApplication@@YAJHK@Z
?AsdeUnInitApplication@@YAXXZ
?GetSubUIFace@CFaceUI@@QAEPAV1@PBD0@Z
?GetUIFace@CSkinResouce@@QAEPAVCFaceUI@@PBD0@Z
?SubClass@CSkinStatic@@QAEXPAUHWND__@@@Z
?SubClass@CSkinButton@@QAEXPAUHWND__@@@Z
?SubClass@CSkinCheckBox@@QAEXPAUHWND__@@@Z
?GetSkinImage@CFaceUI@@QAEPAVCGdiBitmap@@XZ
?GetBmpInfo@CGdiBitmap@@QAEAAUtagBITMAP@@XZ
?GetBitmap@CGdiBitmap@@QAEPAUHBITMAP__@@XZ
?LVChangeSize@CViewUnit@@QAEXHHHH@Z
?SetSkin@CSkinButton@@QAEXPAVCFaceButton@@@Z
Sections
.text Size: 192KB - Virtual size: 190KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ