Static task
static1
Behavioral task
behavioral1
Sample
ee291eaac2dc56bca1022264ccc15c21a20a92f609e44e155c26de933174dc52.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ee291eaac2dc56bca1022264ccc15c21a20a92f609e44e155c26de933174dc52.exe
Resource
win10v2004-20220901-en
General
-
Target
ee291eaac2dc56bca1022264ccc15c21a20a92f609e44e155c26de933174dc52
-
Size
268KB
-
MD5
0c3bceb23b1cbec8f76126e3a3a82c90
-
SHA1
967a164af2cc23898e9787c56bc36b8fc1c6a91a
-
SHA256
ee291eaac2dc56bca1022264ccc15c21a20a92f609e44e155c26de933174dc52
-
SHA512
ffbdd5a96780102b5aa1471bdbdc6505c0898b222c5cc2d028e6f617dd00375f30846baaf4859d05cd2e8f24243f8e33923e87239455dc15ecdf7dfb06b1c376
-
SSDEEP
6144:LiR0DB0BxIQFtSTNICE7BuanldRZPASigQ9wTkVWlScolk0Jzo0naGK:LiR0DB0BxIQFthCE7BNlrZoSnQ9wQVWj
Malware Config
Signatures
Files
-
ee291eaac2dc56bca1022264ccc15c21a20a92f609e44e155c26de933174dc52.exe windows x86
c5f172b1d51de6ad4b8ea5e0bbba0e0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualAlloc
GetSystemInfo
RtlUnwind
GetStartupInfoA
HeapSize
HeapReAlloc
HeapDestroy
VirtualQuery
GetCommandLineA
ExitProcess
TerminateProcess
GetCPInfo
LCMapStringA
LCMapStringW
HeapCreate
VirtualFree
IsBadWritePtr
GetOEMCP
WriteFile
SetFilePointer
FlushFileBuffers
CloseHandle
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
InitializeCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
ReadFile
SetStdHandle
GetLocaleInfoW
GetLastError
MultiByteToWideChar
LoadLibraryA
GetProcAddress
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCurrentProcess
FlushInstructionCache
GetProcessHeap
HeapAlloc
WideCharToMultiByte
FindResourceExA
LoadResource
LockResource
SizeofResource
FindResourceA
GetCurrentThreadId
WritePrivateProfileStringA
GetModuleHandleA
GetModuleFileNameA
GetPrivateProfileStringA
lstrcpyA
GetTickCount
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
RaiseException
DeleteCriticalSection
GetSystemTimeAsFileTime
user32
GetWindow
SystemParametersInfoA
MapWindowPoints
SetWindowPos
GetParent
RedrawWindow
ShowWindow
ReleaseDC
GetDC
EndPaint
BeginPaint
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetFocus
EndDialog
PostMessageA
SetRect
DrawTextA
DestroyWindow
CallWindowProcA
GetWindowLongA
DefWindowProcA
OffsetRect
GetDlgItem
SetWindowLongA
DialogBoxParamA
FlashWindow
SetCursor
KillTimer
SetTimer
ClientToScreen
GetWindowRect
MoveWindow
FillRect
GetCursorPos
LoadIconA
SendMessageA
LoadCursorFromFileA
LoadCursorA
GetSystemMetrics
GetActiveWindow
UnregisterClassA
SetWindowTextA
gdi32
CreateCompatibleDC
StretchBlt
BitBlt
DeleteObject
SelectObject
SetBkMode
CreateFontIndirectA
CreateSolidBrush
GetStockObject
SetTextColor
shell32
ShellExecuteA
asdeatlgameframe
?DetchSelf@CViewUnit@@QAEXXZ
?LVShow@CViewUnit@@QAEXEH@Z
?LVRefresh@CViewUnit@@QAEXH@Z
?BltAlphaEx@CDDrawRender@@QAEJKKKKPAVCDDrawSurface@@KK0KK0KK@Z
?Blt@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@K@Z
?ReSetRect@CViewUnit@@QAEXAAUtagRECT@@@Z
?GetBackBuffer@CDisplay@@QAEPAVCDDrawSurface@@XZ
??0CDDrawRender@@QAE@PAVCDDrawSurface@@@Z
?BltColorkey@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@@Z
?BltAlpha@CDDrawRender@@QAEJKKPAVCDDrawSurface@@0PAUtagRECT@@0KK@Z
??1CDDrawRender@@QAE@XZ
?GetDDSC@CDDrawSurface@@QAEAAU_DDSURFACEDESC@@XZ
?SetColorKey@CDDrawSurface@@QAEJK@Z
?SubClass@CSkinCheckBox@@QAEXPAUHWND__@@@Z
?SetSkin@CSkinCheckBox@@QAEXPAVCFaceCheckBox@@@Z
?OnOk@CDialog@@QAEJGGPAUHWND__@@AAH@Z
?GetBitmap@CGdiBitmap@@QAEPAUHBITMAP__@@XZ
?GetBmpInfo@CGdiBitmap@@QAEAAUtagBITMAP@@XZ
?GetSkinImage@CFaceUI@@QAEPAVCGdiBitmap@@XZ
?SubClass@CSkinButton@@QAEXPAUHWND__@@@Z
?GetUIFace@CSkinResouce@@QAEPAVCFaceUI@@PBD0@Z
?GetSubUIFace@CFaceUI@@QAEPAV1@PBD0@Z
?SetSkin@CSkinButton@@QAEXPAVCFaceButton@@@Z
?AsdeInitApplication@@YAJPAUHINSTANCE__@@HPBD111J@Z
?Create@CMainFrame@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBDKKV_U_MENUorID@4@PAX@Z
?AsdeTimerRunApplication@@YAJHK@Z
?AsdeUnInitApplication@@YAXXZ
??1CDDrawSurface@@QAE@XZ
??0CDDrawSurface@@QAE@XZ
?OnDraw@CSingleUnit2@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?CTextUnit_DisConstruct@CTextUnit@@CAXPAV1@@Z
??0CViewRect@@QAE@XZ
?__init__@CViewUnit@@AAEXHHHHE@Z
??1CViewRect@@QAE@XZ
?CTextUnit_Construct@CTextUnit@@CAXPAV1@@Z
?OnDraw@CTextUnit@@EAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDetchFrom@CTextUnit@@EAEXPAUCViewLayer@@PAUCViewArea@@@Z
?OnDrawText@CTextUnit@@UAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
?CMainFrame_DisConstruct@CMainFrame@@CAXPAV1@@Z
?CMainFrame_Construct@CMainFrame@@CAXPAV1@PADFAAVCMainFrameTraits@@W4AD_GAME_TYPE@@@Z
?CDialog_DisConstruct@CDialog@@CAXPAV1@@Z
?CDialog_Construct@CDialog@@CAXPAV1@IPBD@Z
?ProcessWindowMessage@CSkinButton@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinCheckBox@@UAEHPAUHWND__@@IIJAAJK@Z
?SendPackage@CMainFrame@@QAEHPADG_N@Z
?GetDDSurf@CDDrawSurface@@QAEPAUIDirectDrawSurface@@XZ
?CreateFromBitmap@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?CreateOgg@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?CreateWave@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?SetToEVolume@CSoundManager@@QAEXPAVCSoundBuffer@@@Z
?GetGameSaveHandle@CMainFrame@@QAEPAVCGameSave@@XZ
?MessageBoxA@CMainFrame@@QAEHPBD0I@Z
?GetCmdPlayerInfoAtServerSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?DisplayChatText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@0H@Z
?AsdeForceExitApplication@@YAJHH@Z
?Attach@CSingleUnit2@@QAEJPAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@2@Z
?GetSoundManager@CMainFrame@@QAEPAVCSoundManager@@XZ
?PlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?RePlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?FreeSkin@CSkinResouce@@SAXAAPAV1@@Z
?Destroy@CDDrawSurface@@QAEJXZ
?GetDeskViewUnit@CMainFrame@@QAEPAVCViewUnit@@XZ
?AttachUnit@CViewManager@@QAEXPAVCViewUnit@@GG@Z
?SeatServerToClient@CMainFrame@@QAEFF@Z
?GetGameRect@CMainFrame@@QAEXPAUtagRECT@@@Z
?SendFrameOperation@CMainFrame@@QAEHIJAAJ@Z
?GetViewManager@CMainFrame@@QAEPAVCViewManager@@XZ
?AllocLayers@CViewManager@@QAEXG@Z
?GetDrawDevice@CMainFrame@@QAEPAVCDevice@@XZ
?LoadSkin@CSkinResouce@@SAPAV1@PAD@Z
?AsdeSetSkin@@YAPAVCSkinResouce@@PAV1@@Z
?BuildPlayerListCtrlColumn@CMainFrame@@QAEJJPAUPLColumnInfo@@@Z
?ApplyText@CTextUnit@@QAEXPAD@Z
?Attach@CTextUnit@@QAEJAAUtagRECT@@PAVCViewManager@@GGPAVCDevice@@KPAUHFONT__@@IHKKK@Z
?LVMoveTo@CViewUnit@@QAEXHHH@Z
?ReSetRect@CViewUnit@@QAEXHHHH@Z
?GetCmdInfo@CMainFrame@@QAEAAUCMDINFO@@XZ
?ProcessWindowMessage@CDialog@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessFrameEvent@CDialog@@UAEHIJAAJ@Z
?DoModal@CDialog@@QAEHPAUHWND__@@J@Z
?GetMyInfo@CMainFrame@@QAEPAUPLAYERINFO@@XZ
?ProcessFrameEvent@CMainFrame@@UAEHIJAAJ@Z
?ProcessSocketXieYi@CMainFrame@@UAEHIAAVbistream@Win32Tools@@AAJK@Z
?ProcessWindowMessage@CMainFrame@@UAEHPAUHWND__@@IIJAAJK@Z
ruleedit
??1CRuleConfig@@QAE@XZ
?PraseRuleString@CRuleConfig@@QAEHPBD0@Z
?GetNumericConfig@CRuleConfig@@QAEHIAA_J_J@Z
??0CRuleConfig@@QAE@XZ
gamesave
?SnapStep@CGameSave@@QAEHIAAGAAK1AAPAD@Z
Sections
.text Size: 180KB - Virtual size: 178KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ