a6e3a4e958c83fb8b6edc72e6f8f3535748d306608e4f52bce37703fc87a432c

Sharing

Copy URL Twitter E-mail

General

Target

a6e3a4e958c83fb8b6edc72e6f8f3535748d306608e4f52bce37703fc87a432c
Size

960KB
MD5

0a5a70c070b2c3c30b97fbceb9452d40
SHA1

b3a99d40124c266e03989f2ab3fd2eb26f13bbd8
SHA256

a6e3a4e958c83fb8b6edc72e6f8f3535748d306608e4f52bce37703fc87a432c
SHA512

843655650056d25d812886928f173ec53ec8c769e5f24130b64a3e10468760682f35778f94f81ebf101d48753e1e7c14665720ba01808719853e60989f6e0118
SSDEEP

12288:HVnZH45OEvoBbmYZkKsM/Ak9/o+nAPqRzZLICgreK43T965cJO5rDLteCsq9Y0TN:O0aYZ7A+PZ3TkeJO1DLthJT//Qsp

Score

N/A

Malware Config

Signatures

Files

a6e3a4e958c83fb8b6edc72e6f8f3535748d306608e4f52bce37703fc87a432c
.exe windows x86

d959d9de130bb47d9ae1b54e41c4bab5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gpigame

SetLogFileLevel
SelectOutputLogLevel
GetLoginInfo
GetVideoSnapCount
ShowLiveGuage
GetRecorderCount
AdjustViewport
GetMapShowName
OnInitVideoSys
StdOutRedirect
SetGameStartFromWhere
Create
DoFile
MoveForwardBack
UpdateSelect
GetDataPacket
GetPlayerInfo
RenderString
UpdateViewFrame
GetCameraAutoMove
VideoFrameMove
OnVideoBegin
GetPlayVelocity
LiveMsg
GetUIPerf
GetRecorderByIdx
CreateLiveModelVideoFile
LiveToEnd
FullVideoFileSessionInfo
VideoSpeedOn
ResetPlayVelocity
GetRecorderFileInfo
LoadVideoHeadNode
SetVideoModle
IsGetLiveEndCmd
ClearBuffer
LoadRecorderFile
GetVideoFileVersionInfo
GameEventLiveUpdateAegisInfo
SetGameingTimeInLive
SetLoadMap
SetVideoServerSnapCount
AddNewLiveSnapShotDesc
ResetLiveCmdsPos
SaveVideoFileOnErrorEvent
UploadReplay
FileUpdateStep
GameEventStateWait
GameEventLiveSpectatorInfo
GetCtrlID
GetSkinFile7
GetPlayerByID
SetSnap
LoadSnapFromServer
SetSnapData
SnapReset
GetCheckSumData
RecvUpdateFile
GetGameScoreType
FriendChat
GroupChat
ClearFriendList
AddFriends
AddFriendsEnd
SystemChat
PlatRequestAddFriend
PlatAddFriendRet
StartKeyboardHook
SetPID
StopKeyboardHook
HandleCharEvent
SmallSpeakerLive
GameLiveVoteRtn
LiveMsgCancel
LiveChat
SetSelSnap
GetLoaclSnapListCount
LiveModelLoadSnapFromServer
LoadSessionNode
LoadVideoSrcFileNode
GetLiveCfgWateTime
GameInit
SetJoinGame
EnableNetwork
Free
Realloc
Malloc
QueryTotalMem
QueryMem
ErrorLog
AddRecorder
Run
GetGameCheckSum
AddAttrLog
GetSnap
GetSnapData
AddAppendExplain
SetDebugLevel
SetLoginRes
UpdateSessionID
GameEventJoinGame
EnableSaveSrcData
?GetPlayerOfflineCodeLangString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
SetScoreInfo
GameEventLoadingStep
GameMsgDoCmd
GameEventPlatInfo
GameEventRoomInfo
GameEventItemInfo
AddOption
SetOptionInfo
RefreshPlayerInfo
SetPlayerInfo
AddPlayer
UpdateMapID
SetSessionInfo
UpdatePerfStatInfo
SetCtrlInfo
GetPlayerIDByName
GameLiveLabaRtn
SmallSpeaker
SetMediaEnable
HandleKeyEvent
UpdateErrorInfo
PipeAppProc
LogAttr
AddSessionJoinInfo
SetScriptRandSeed
GameRun
SetFPS
GetVideoAndLivePauseState
IsGameLogicPause
PauseGameLogic
GetSessionInfo
GetHostPlayerID
GameEventMyTurnBlock
GetVerString
EndProfile
BeginProfile
Reconnect
UpdatePing
RenderPrint
GameEventTurnBlock
GetLogicFrame
UpdateHostAddr
UpdatePlatformVer
UpdatePlayerName
GetSkinFile3
GetLogPath
InitLogCtrl
SetOpenUIEditorFunc
SetLazyLoadCFXEffectSystem
UtilGetUsedMem
InsideVersion
EnableRoleMode
SetVfsMode
?GetLangString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD0@Z
VLog
OutputDbgString
SetReplayFileName
SetManualReplayPath
GetExecVersion
UpdateExecGameVer
GetScriptVer
UpdateScriptVer
GetMapVer
UpdateMapVer
UpdateMapName
ProfileBegin
EndLogCtrl
End
ProfileEnd
NoticeRunTimeUsing
SetCorePath
DoString
IsHookEnable
IsBeginSelect
Win32Msg
IsMapOK
GameEventCloseWindow
GetGameLogicFrame
IsFullScreen
SetWinHandle

kernel32

HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetConsoleCtrlHandler
FatalAppExitA
GetConsoleMode
GetConsoleCP
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
CompareStringW
FlushFileBuffers
GetCPInfo
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetStartupInfoA
GetCommandLineA
ExitThread
ExitProcess
RtlUnwind
UnhandledExceptionFilter
GetLocaleInfoA
InterlockedDecrement
InterlockedIncrement
SetStdHandle
GetFileType
SetFilePointer
SetHandleCount
FreeLibrary
LoadLibraryA
GetCurrentProcessId
GetCurrentThreadId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CreateFileW
SetEndOfFile
SetEnvironmentVariableA
lstrlenW
GetLastError
GetExitCodeProcess
WaitForSingleObject
ContinueDebugEvent
WaitForDebugEvent
CompareStringA
SetConsoleScreenBufferSize
CreateSemaphoreW
ReleaseSemaphore
CreateMutexW
ReleaseMutex
InterlockedExchange
InterlockedCompareExchange
GetVersionExW
GetModuleHandleW
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
GetSystemInfo
GetSystemTimeAsFileTime
CreateDirectoryA
CopyFileA
GetPrivateProfileSectionA
FindFirstFileA
FindNextFileA
FindClose
OutputDebugStringA
GetFileAttributesA
SetFileAttributesA
WaitNamedPipeA
SetNamedPipeHandleState
WriteFile
PeekNamedPipe
ReadFile
RemoveDirectoryA
GetProcessHeap
HeapAlloc
HeapFree
AllocConsole
SetConsoleTitleA
GetStdHandle
DebugSetProcessKillOnExit
CreateEventA
SetEvent
lstrcmpA
DuplicateHandle
TerminateThread
IsBadReadPtr
lstrcpynA
lstrlenA
IsBadWritePtr
SuspendThread
GetThreadContext
ResumeThread
SetLastError
GetCurrentThread
ReadProcessMemory
GetVersionExA
CreateFileA
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SetThreadPriority
GetCurrentDirectoryA
DeleteFileA
CreateThread
MultiByteToWideChar
Sleep
GetPrivateProfileIntA
MulDiv
GetTickCount
GetLocalTime
GetModuleHandleA
CreateToolhelp32Snapshot
Process32First
Process32Next
WideCharToMultiByte
OpenFileMappingA
FormatMessageA
MapViewOfFile
UnmapViewOfFile
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
SetProcessAffinityMask
OpenMutexA
CreateMutexA
RaiseException
GetModuleFileNameA
GetProcAddress
CreateProcessA
CloseHandle

user32

DrawTextA
GetDesktopWindow
IsWindow
CreateDialogParamA
GetDlgItem
SetTimer
CheckDlgButton
LoadBitmapA
SendDlgItemMessageA
IsDlgButtonChecked
ReleaseCapture
SetDlgItemTextA
GetCursorPos
GetDC
AdjustWindowRect
SetWindowPos
GetClientRect
GetWindowTextA
SetWindowTextA
SetFocus
LoadStringA
MessageBoxA
LoadAcceleratorsA
PeekMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
CreateWindowExA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
ShowWindow
SetForegroundWindow
SendMessageA
BeginPaint
EndPaint
PostQuitMessage
SetActiveWindow
SetWindowLongA
DestroyWindow
DialogBoxParamA
EndDialog
IsIconic
GetWindowDC
ReleaseDC
GetWindowTextW
DrawTextW
LoadImageA
GetWindowLongA
FillRect
PtInRect
TrackMouseEvent
GetAsyncKeyState
IsZoomed
PostMessageA
GetWindowRgn
SetWindowRgn
ScreenToClient
InflateRect
GetSystemMetrics
SystemParametersInfoA
GetWindowRect
DefWindowProcA

gdi32

BitBlt
GetObjectA
CreateSolidBrush
SelectClipRgn
SetTextColor
FrameRgn
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
SetBkColor
SelectObject
StretchBlt
CreateFontIndirectA
CreateRoundRectRgn
CreateRectRgn
SetBkMode
DeleteObject
CombineRgn

advapi32

RegOpenKeyA
RegQueryValueExA

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

oleaut32

SysFreeString
SysStringLen
SysAllocString
VariantClear
GetErrorInfo
VariantChangeType
VariantInit
SetErrorInfo
CreateErrorInfo

shlwapi

PathIsRelativeA
PathRelativePathToA
PathFileExistsA
PathRemoveFileSpecA
PathCombineA

ws2_32

bind
WSACleanup
inet_ntoa
ntohl
inet_addr
WSAGetLastError
WSASetLastError
htonl
htons
send
WSASocketW
getsockopt
select
shutdown
WSARecv
WSASend
socket
WSAStartup
ioctlsocket
getsockname
ntohs
setsockopt
WSASocketA
connect
closesocket
recv

dbghelp

StackWalk
SymFunctionTableAccess
SymGetModuleBase
SymGetLineFromAddr
SymCleanup
SymLoadModule
SymInitialize
SymSetOptions
SymGetOptions
SymGetSymFromAddr

comctl32

ImageList_Add
ImageList_Create
ord17

iphlpapi

GetAdaptersInfo

Exports

Exports

??4MPEditor@@QAEAAV0@ABV0@@Z
?GetBrush@MPEditor@@QAEHXZ
?GetCursor@MPEditor@@QAEPAVMPSceneObject@MindPower@@XZ
?GetPlusState@LuaServer@@QAEAAVLuaStateOwner@LuaPlus@@XZ
?GetSelectSceneObj@MPEditor@@QAEPAVCSceneObj@@XZ
?IsEditorDebugMode@MPEditor@@QAEHXZ
?IsEnable@MPEditor@@QAEHXZ
?SetBrush@MPEditor@@QAEXH@Z
?ShowBrush@MPEditor@@QAEX_N@Z
?ShowCursor@MPEditor@@QAEX_N@Z

Sections

.text
Size: 708KB - Virtual size: 704KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

MM�
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d959d9de130bb47d9ae1b54e41c4bab5

Headers

File Characteristics

Imports

gpigame

kernel32

user32

gdi32

advapi32

ole32

oleaut32

shlwapi

ws2_32

dbghelp

comctl32

iphlpapi

Exports

Exports

Sections

.text Size: 708KB - Virtual size: 704KB

.rdata Size: 124KB - Virtual size: 122KB

.data Size: 20KB - Virtual size: 5.1MB

.rsrc Size: 16KB - Virtual size: 14KB

MM� Size: 88KB - Virtual size: 88KB

.text
Size: 708KB - Virtual size: 704KB

.rdata
Size: 124KB - Virtual size: 122KB

.data
Size: 20KB - Virtual size: 5.1MB

.rsrc
Size: 16KB - Virtual size: 14KB

MM�
Size: 88KB - Virtual size: 88KB