Static task
static1
Behavioral task
behavioral1
Sample
76068fca1cc28db6def9a2e2afd079c5954045f4a3dab8139b9129dc0e84d921.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
76068fca1cc28db6def9a2e2afd079c5954045f4a3dab8139b9129dc0e84d921.exe
Resource
win10v2004-20220812-en
General
-
Target
76068fca1cc28db6def9a2e2afd079c5954045f4a3dab8139b9129dc0e84d921
-
Size
604KB
-
MD5
067325f2160fe5a51ff800ea0e3299d0
-
SHA1
23c0a570f94270da043d7286ccf1899ad7c9f707
-
SHA256
76068fca1cc28db6def9a2e2afd079c5954045f4a3dab8139b9129dc0e84d921
-
SHA512
5b8dcdb4527e808e500394ee775c96257c1ef7119d49955115745bda6c5787581b43a03cc51a250b2238a5ec92101955c9dfd42f755694db37ccea753a7484fa
-
SSDEEP
12288:vlfTloj323MbZ951SGZpFQs207Uao7Zmh0kqiQP8PaGS:vB8m3Misgb7ZXkvpPaGS
Malware Config
Signatures
Files
-
76068fca1cc28db6def9a2e2afd079c5954045f4a3dab8139b9129dc0e84d921.exe windows x86
18b6bba3e0fbbfca97a2e5955f9d5a38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mciSendCommandA
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
sndPlaySoundA
timeGetTime
kernel32
IsProcessorFeaturePresent
GetProcAddress
GetStartupInfoA
HeapValidate
GetTickCount
GetPrivateProfileStringA
GetPrivateProfileIntA
GetModuleFileNameA
QueryPerformanceFrequency
Sleep
WritePrivateProfileStringA
DeleteFileA
lstrcpynA
lstrlenA
lstrcpyA
FindFirstFileA
GetFileAttributesExA
LoadLibraryA
GetVersionExA
GetLastError
GetExitCodeThread
CreateThread
TerminateThread
SetUnhandledExceptionFilter
CloseHandle
SetFilePointer
CreateFileA
FormatMessageA
GetModuleHandleA
VirtualQuery
IsBadWritePtr
WriteFile
GetFileSize
UnmapViewOfFile
WideCharToMultiByte
CreateFileW
CreateFileMappingA
MapViewOfFile
GetProcessHeap
user32
SetWindowLongA
ShowWindow
MoveWindow
GetWindowLongA
GetWindowTextA
SetWindowRgn
ReleaseDC
GetDC
CopyRect
IsIconic
DrawIcon
GetSystemMenu
AppendMenuA
FindWindowA
LoadIconA
GetWindowRect
GetCursorPos
ShowCursor
wsprintfA
MessageBoxA
PostQuitMessage
SetForegroundWindow
SetWindowTextA
SetWindowPos
SetClassLongA
PostMessageA
wvsprintfA
ChangeDisplaySettingsA
EnumDisplaySettingsA
LoadImageA
InvalidateRect
EnableWindow
GetClientRect
SetTimer
FlashWindow
KillTimer
SetCursor
LoadCursorA
GetSystemMetrics
DrawTextA
GetParent
SetCapture
ReleaseCapture
SendMessageA
GetCapture
SetRect
FillRect
gdi32
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetObjectA
CreateFontA
CreateFontIndirectA
GetCurrentObject
CreateSolidBrush
BitBlt
CreateBitmap
CreateRoundRectRgn
DeleteObject
DeleteDC
SetTextAlign
SetBkColor
SetTextColor
CreateDIBSection
TextOutA
GetStockObject
shell32
ShellExecuteA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
mfc42
ord3619
ord755
ord5875
ord5789
ord470
ord2642
ord6215
ord1146
ord941
ord6172
ord2864
ord4123
ord6453
ord5265
ord4998
ord4710
ord2514
ord6052
ord1775
ord860
ord4425
ord3597
ord3610
ord2575
ord4396
ord3574
ord3402
ord3721
ord656
ord795
ord609
ord641
ord324
ord2289
ord2370
ord2302
ord4234
ord922
ord6199
ord924
ord926
ord535
ord6334
ord537
ord2860
ord6197
ord4476
ord1768
ord4299
ord4376
ord858
ord2614
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord4622
ord3738
ord561
ord1576
ord2621
ord1134
ord5714
ord2725
ord2841
ord1200
ord939
ord4114
ord2107
ord5450
ord5440
ord6383
ord6394
ord4853
ord5572
ord4129
ord5683
ord4284
ord4160
ord2863
ord2086
ord2078
ord4224
ord1105
ord1187
ord2919
ord3706
ord5873
ord3573
ord2301
ord1948
ord5303
ord4699
ord5715
ord565
ord817
ord2726
ord4226
ord2820
ord3811
ord3742
ord823
ord2915
ord5785
ord540
ord2818
ord800
ord323
ord2405
ord640
ord2379
ord1168
ord1641
ord5261
ord4275
ord2414
ord818
ord3626
ord3663
ord567
ord3571
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord1949
ord825
ord5280
ord1640
ord815
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter
_exit
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
_mbsrchr
_itoa
memmove
fseek
_strupr
free
malloc
printf
_controlfp
fread
fclose
sscanf
_mbscmp
exit
_splitpath
vsprintf
time
srand
atol
rand
_ftol
__CxxFrameHandler
sprintf
_CIacos
_finite
_setmbcp
calloc
floor
qsort
_strdup
setlocale
longjmp
_setjmp3
isdigit
isspace
_CIpow
fopen
shlwapi
PathFileExistsA
msimg32
AlphaBlend
ddvclient
?SetResourcePath@CPanel@@QAEXPAXABVCString@@PBD@Z
?Create@CPanel@@QAEXPAVCWnd@@@Z
?GetGameHelpURL@GameDataTrans@@QAEHAAVCString@@H@Z
?SetGameBaseState@GameDataTrans@@QAEXPAVCGameBaseState@@@Z
?SetMainFrame@GameDataTrans@@QAEXPAX@Z
?SetGameVersion@GameDataTrans@@QAEXIPBD@Z
??0GameDataTrans@@QAE@XZ
??1GameDataTrans@@UAE@XZ
?GetRunOff_ML@GameDataTrans@@QBEHXZ
?CheckLobbyExist@GameDataTrans@@QAE_NXZ
?ReceiveLobbyMsg@GameDataTrans@@QAEXIH@Z
?ReceiveLobbyGameDataMsg@GameDataTrans@@QAEXIH@Z
?SetGiftAnimatPathInfo@CPanel@@QAEXPBU_GIFTRECT@@H@Z
?SendChatData@GameDataTrans@@QAEXPBDHPBU_LOBBY_ROOMCHAT_HEADER@@@Z
?DispatchKeyDown@CPanel@@QAEHHJ@Z
?DestroyPanel@CPanel@@QAEXXZ
?SetParentClient@CPanel@@QAEXABVCRect@@@Z
?GetViewServAddress@GameDataTrans@@QAEXAAVCString@@AAI@Z
?CanLookPlayerView@GameDataTrans@@QBEHXZ
?GetSelVideoDeviceInx@GameDataTrans@@QBEHXZ
?GetViewUserPhoto@GameDataTrans@@QAEHJPAXAAH@Z
?ShowMenu_Gift@GameDataTrans@@QAEXPBX@Z
?SendAddFriend@GameDataTrans@@QAEXJ@Z
?DealPanelMenuClk@GameDataTrans@@QAEXIPBX@Z
?UpdateIMWindow@GameDataTrans@@QAEXXZ
?SendTestNetRateData@GameDataTrans@@QAE_NPAU_CLIENT_NETRATE_INFOR@@@Z
?ShowMenu_UserInfo@GameDataTrans@@QAEXPBXH@Z
?SetPlayEffect@CPanel@@QAEXH@Z
?SendFrameCreatedToLobby@GameDataTrans@@QAEXXZ
??0CPanel@@QAE@XZ
?ShowSystemInfor@CPanel@@QAEXHPBD0@Z
??1CPanel@@UAE@XZ
?IsCanGetOut@CGameBaseState@@UBEHPBU_SERVER_GAME_USER_DATA@@0J@Z
??1CGameBaseState@@UAE@XZ
??_7CGameBaseState@@6B@
?AddUsers@CPanel@@QAEXPBU_SERVER_GAME_USER_DATA@@H@Z
?RemoveAllUser@CPanel@@QAEHXZ
?RemoveUser@CPanel@@QAEHJH@Z
?ShowGameFenLuc@CPanel@@QAEXPBXH@Z
?SendExitData@GameDataTrans@@QAEXH@Z
?SendTransData@GameDataTrans@@QAEXHPADH@Z
?SendReadyGame@GameDataTrans@@QAEXXZ
?UpdateUserInfo@CPanel@@QAEXPBU_SERVER_GAME_USER_DATA@@H@Z
?SendSetPGData@GameDataTrans@@QAEXH@Z
?GetRoomType@GameDataTrans@@QAEHXZ
avmodule40
?SetOutputBackImage@CAVManager@@QAEHHPAEH@Z
?GetInput@CAVManager@@QAEPAVCWnd@@XZ
?GetOutput@CAVManager@@QAEPAVCWnd@@H@Z
?SetVideoAlwaysOpen@CAVManager@@QAEXXZ
?SetInputBackImage@CAVManager@@QAEHPAEH@Z
??0CAVManager@@QAE@PAVCWnd@@@Z
?SetVideoOpen@CAVManager@@QAEXH@Z
?SetNetInfo@CAVManager@@QAEXPBDI@Z
?SetUserInfo@CAVManager@@QAEXHHPBD@Z
?InitConfigInfo@CAVManager@@QAEHPBD@Z
?StartThread@CAVManager@@QAEXXZ
?StartSocket@CAVManager@@QAEXXZ
?SetSnapshotFilePath@CAVManager@@QAEXPBD@Z
?Close@CAVManager@@QAEXXZ
ddvctrllib
?loadbmpS@@YAHPBDAAVCBitmap@@@Z
?TransparentToDC@@YAXPAVCDC@@HHHHPAVCBitmap@@HHHHK@Z
?TransparentToDC@@YAXPAVCDC@@HHPAVCBitmap@@K@Z
?GetUpperDirectory@CLibFunc@@SAHPBDAAVCString@@H@Z
?PaintToDC@@YAXPAVCDC@@HHHHPAVCBitmap@@HH@Z
??1CResizeButton@@UAE@XZ
?DrawTitle@CDlgResize@@MAEXPAVCDC@@@Z
?OnCloseResize@CDlgMessage@@MAEXH@Z
??0CResizeButton@@QAE@XZ
?OnNo@CDlgMessage@@MAEXXZ
?CutString@CLibFunc@@SAHPADHHH@Z
?Load@CPicture2@@QAEHVCString@@@Z
?DrawBorder@CLibFunc@@SAXPAVCDC@@AAVCBitmap@@UtagPOINT@@UtagSIZE@@3HK@Z
?Show@CPicture2@@QAEHPAVCDC@@VCRect@@@Z
?SaveCurrentFace@@YAXPAVCDC@@AAVCBitmap@@HH@Z
?DrawHollowRect@CLibFunc@@SAXPAVCDC@@0PBUtagRECT@@1@Z
??1CPicture2@@UAE@XZ
??0CPicture2@@QAE@XZ
??0CHyperLink@@QAE@XZ
?Visite@CHyperLink@@QAEXVCString@@@Z
??1CHyperLink@@UAE@XZ
?SetModelType@CDlgMessage@@QAEXHHHH@Z
?SetCurFace@CResizeButton@@QAEXPAVCBitmap@@HHH@Z
?SetToolTipText@CResizeButton@@QAEXPBDHI@Z
?GetMessageMap@CResizeButton@@MBEPBUAFX_MSGMAP@@XZ
?PreSubclassWindow@CResizeButton@@MAEXXZ
?PreTranslateMessage@CResizeButton@@MAEHPAUtagMSG@@@Z
?DrawItem@CResizeButton@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?DrawBtnFace@CResizeButton@@UAEXPAVCDC@@UtagPOINT@@I@Z
?LoadBitmapA@CResizeButton@@QAEHPBDHHH@Z
?ShowMessage@CDlgMessage@@QAEHPBD0HH@Z
?g_Log@@3VCLog@@A
?ADD_Log@CLog@@QAEXPBDHH@Z
??1CDlgResize@@UAE@XZ
??0CDlgMessage@@QAE@PAVCWnd@@@Z
?SetMsgTextIntervalBorder@CDlgMessage@@QAEXEEEE@Z
??1CDlgMessage@@UAE@XZ
?GetMessageMap@CDlgMessage@@MBEPBUAFX_MSGMAP@@XZ
?PreCreateWindow@CDlgResize@@MAEHAAUtagCREATESTRUCTA@@@Z
?DoDataExchange@CDlgMessage@@MAEXPAVCDataExchange@@@Z
?OnInitDialog@CDlgMessage@@MAEHXZ
?OnOK@CDlgMessage@@MAEXXZ
?OnCancel@CDlgMessage@@MAEXXZ
?InitCtrlSkin@CDlgMessage@@MAEXXZ
?OrientationItem@CDlgMessage@@MAEXHH@Z
?OnYes@CDlgMessage@@MAEXXZ
msvcp60
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
d3d8
Direct3DCreate8
ddraw
DirectDrawCreateEx
dsound
ord1
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 444KB - Virtual size: 442KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ