Static task
static1
Behavioral task
behavioral1
Sample
345c5250f551f54ffa3c23276995fbc54fe7f01de9a6424bf9aa2af25d95933a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
345c5250f551f54ffa3c23276995fbc54fe7f01de9a6424bf9aa2af25d95933a.exe
Resource
win10v2004-20220812-en
General
-
Target
345c5250f551f54ffa3c23276995fbc54fe7f01de9a6424bf9aa2af25d95933a
-
Size
272KB
-
MD5
0617dc267288ac3fa869b9fbb4f39720
-
SHA1
4a1f869278448947da595fdc7ad2f9f00e03d037
-
SHA256
345c5250f551f54ffa3c23276995fbc54fe7f01de9a6424bf9aa2af25d95933a
-
SHA512
3cf0107b620ffa51b4b9c662d12bd996021d5fc3e2d935dc271b27b54194163390092d564a30746eb69763a14b553c400eff95b9e961831f4880e09dcb3d3458
-
SSDEEP
6144:zJlFWsnrkRFN1La5BvmUj70WtWwiGFhNE8PEcU7TNxByslYmtSOhSsQLH5AdC:wsy2QhxMslYmEISsPdC
Malware Config
Signatures
Files
-
345c5250f551f54ffa3c23276995fbc54fe7f01de9a6424bf9aa2af25d95933a.exe windows x86
8d5e79c1b2e8deeb3881595520c2d171
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
RtlUnwind
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetModuleHandleA
HeapReAlloc
HeapDestroy
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TerminateProcess
SetUnhandledExceptionFilter
GetStartupInfoA
GetCommandLineA
HeapCreate
VirtualFree
TlsAlloc
GetOEMCP
GetCPInfo
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
RaiseException
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
SetFilePointer
SetStdHandle
FlushFileBuffers
CloseHandle
lstrcpyA
WritePrivateProfileStringA
GetModuleFileNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThreadId
HeapAlloc
GetProcessHeap
HeapFree
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
GetTickCount
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
LoadLibraryA
GetProcAddress
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
IsBadWritePtr
user32
GetForegroundWindow
GetActiveWindow
CreateDialogParamA
DialogBoxParamA
CallWindowProcA
GetFocus
PtInRect
GetCapture
ReleaseCapture
OffsetRect
IsWindowVisible
LoadCursorA
SetCursor
DestroyWindow
EnableWindow
SetWindowLongA
SetWindowRgn
FlashWindow
SendMessageA
GetDlgCtrlID
InvalidateRect
PostMessageA
SetRect
DrawTextA
GetWindow
GetWindowRect
SystemParametersInfoA
MapWindowPoints
SetWindowPos
GetDlgItem
GetParent
SetFocus
KillTimer
SetTimer
RedrawWindow
ShowWindow
ReleaseDC
GetDC
EndPaint
BeginPaint
GetClientRect
MoveWindow
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetWindowLongA
EndDialog
DefWindowProcA
UnregisterClassA
FillRect
gdi32
CreatePatternBrush
CreateRoundRectRgn
CreateSolidBrush
DeleteDC
CreateFontIndirectA
SelectObject
CreateCompatibleDC
GetStockObject
SetTextColor
SetBkMode
DeleteObject
BitBlt
StretchBlt
shell32
ShellExecuteA
ruleedit
?GetNumericConfig@CRuleConfig@@QAEHIAA_J_J@Z
?PraseRuleString@CRuleConfig@@QAEHPBD0@Z
??1CRuleConfig@@QAE@XZ
??0CRuleConfig@@QAE@XZ
chargeweb
??0CChargeWebConfig@@QAE@XZ
??1CChargeWebConfig@@QAE@XZ
?DoMain@CChargeWebConfig@@QAEHPBDHHHH@Z
?ChargeDlg_MoveWindow@CChargeWebConfig@@QAEXHH@Z
?ChargeDlg_ShowWindow@CChargeWebConfig@@QAEXH@Z
asdeatlgameframe
??0CDDrawRender@@QAE@PAVCDDrawSurface@@@Z
?BuildPlayerListCtrlColumn@CMainFrame@@QAEJJPAUPLColumnInfo@@@Z
?AsdeForceExitApplication@@YAJHH@Z
?ApplyText@CTextUnit@@QAEXPAD@Z
?Attach@CTextUnit@@QAEJAAUtagRECT@@PAVCViewManager@@GGPAVCDevice@@KPAUHFONT__@@IHKKK@Z
?CMainFrame_DisConstruct@CMainFrame@@CAXPAV1@@Z
?CMainFrame_Construct@CMainFrame@@CAXPAV1@PADFAAVCMainFrameTraits@@W4AD_GAME_TYPE@@@Z
?ProcessWindowMessage@CMainFrame@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessSocketXieYi@CMainFrame@@UAEHIAAVbistream@Win32Tools@@AAJK@Z
?ProcessFrameEvent@CMainFrame@@UAEHIJAAJ@Z
?ProcessWindowMessage@CSkinCheckBox@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CRichEditCtrl@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinButton@@UAEHPAUHWND__@@IIJAAJK@Z
?GetDeskViewUnit@CMainFrame@@QAEPAVCViewUnit@@XZ
?SeatServerToClient@CMainFrame@@QAEFF@Z
?Attach@CSingleUnit2@@QAEJAAUtagRECT@@PAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@3@Z
?GetViewManager@CMainFrame@@QAEPAVCViewManager@@XZ
?SendPackage@CMainFrame@@QAEHPADG_N@Z
?GetDrawDevice@CMainFrame@@QAEPAVCDevice@@XZ
?DetchSelf@CViewUnit@@QAEXXZ
?GetMyInfo@CMainFrame@@QAEPAUPLAYERINFO@@XZ
?FreeSkin@CSkinResouce@@SAXAAPAV1@@Z
?GetDDSurf@CDDrawSurface@@QAEPAUIDirectDrawSurface@@XZ
?CreateFromBitmap@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?CreateFromPng@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?CreateFromGif@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?CreateFromJpeg@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?LVChangeRect@CViewUnit@@QAEXHHHHH@Z
?OnDraw@CSingleUnit2@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?CTextUnit_DisConstruct@CTextUnit@@CAXPAV1@@Z
?CTextUnit_Construct@CTextUnit@@CAXPAV1@@Z
?OnDraw@CTextUnit@@EAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDetchFrom@CTextUnit@@EAEXPAUCViewLayer@@PAUCViewArea@@@Z
?OnDrawText@CTextUnit@@UAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
??0CViewRect@@QAE@XZ
?__init__@CViewUnit@@AAEXHHHHE@Z
??1CViewRect@@QAE@XZ
?PlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?RePlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?GetGameRect@CMainFrame@@QAEXPAUtagRECT@@@Z
?SeatClientToServer@CMainFrame@@QAEFF@Z
?GetCmdInfo@CMainFrame@@QAEAAUCMDINFO@@XZ
?ClientToGameRect@CMainFrame@@QAEXPAUtagPOINT@@@Z
?AsdeSetSkin@@YAPAVCSkinResouce@@PAV1@@Z
?AsdeDebugString@@YAXPBDZZ
?Destroy@CDDrawSurface@@QAEJXZ
?SetToEVolume@CSoundManager@@QAEXPAVCSoundBuffer@@@Z
?GetSoundManager@CMainFrame@@QAEPAVCSoundManager@@XZ
?CreateOgg@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?AsdeInitApplication@@YAJPAUHINSTANCE__@@HPBD111J@Z
?Create@CMainFrame@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBDKKV_U_MENUorID@4@PAX@Z
?AsdeTimerRunApplication@@YAJHK@Z
?AsdeUnInitApplication@@YAXXZ
?SubClass@CSkinCheckBox@@QAEXPAUHWND__@@@Z
?LockDC@CDDrawSurface@@QAEPAUHDC__@@XZ
?UnlockDC@CDDrawSurface@@QAEJPAUHDC__@@@Z
?BltColorkey@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@@Z
?BltAlphaEx@CDDrawRender@@QAEJKKKKPAVCDDrawSurface@@KK0KK0KK@Z
?ReSetRect@CViewUnit@@QAEXAAUtagRECT@@@Z
?LVMoveTo@CViewUnit@@QAEXHHH@Z
?SetColorKey@CDDrawSurface@@QAEJK@Z
?LoadImageA@CImageResource@@SAPAUHBITMAP__@@PBDKK@Z
?SubClass@CRichEditCtrl@@QAEXPAUHWND__@@@Z
?SubClass@CSkinButton@@QAEXPAUHWND__@@@Z
?GetUIFace@CSkinResouce@@QAEPAVCFaceUI@@PBD0@Z
?GetSubUIFace@CFaceUI@@QAEPAV1@PBD0@Z
?SetSkin@CSkinButton@@QAEXPAVCFaceButton@@@Z
?GetBitmap@CGdiBitmap@@QAEPAUHBITMAP__@@XZ
?GetBmpInfo@CGdiBitmap@@QAEAAUtagBITMAP@@XZ
?GetSkinImage@CFaceUI@@QAEPAVCGdiBitmap@@XZ
?GetBackBuffer@CDisplay@@QAEPAVCDDrawSurface@@XZ
?BltAlpha@CDDrawRender@@QAEJKKPAVCDDrawSurface@@0PAUtagRECT@@0KK@Z
??1CDDrawRender@@QAE@XZ
?GetDDSC@CDDrawSurface@@QAEAAU_DDSURFACEDESC@@XZ
?ReSetRect@CViewUnit@@QAEXHHHH@Z
?AttachUnit@CViewManager@@QAEXPAVCViewUnit@@GG@Z
?LVShow@CViewUnit@@QAEXEH@Z
?LVRefresh@CViewUnit@@QAEXH@Z
?LoadSkin@CSkinResouce@@SAPAV1@PAD@Z
?AllocLayers@CViewManager@@QAEXG@Z
?SendFrameOperation@CMainFrame@@QAEHIJAAJ@Z
??0CDDrawSurface@@QAE@XZ
??1CDDrawSurface@@QAE@XZ
??0CDDrawSurface@@QAE@PAUIDirectDrawSurface@@@Z
?DisplayStartupText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@@Z
Sections
.text Size: 172KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ