Overview
overview
6Static
static
MOVIE/ending.mpg
windows7-x64
1MOVIE/ending.mpg
windows10-2004-x64
6MOVIE/opening.mpg
windows7-x64
1MOVIE/opening.mpg
windows10-2004-x64
6SYS/kidoku.dat
windows7-x64
3SYS/kidoku.dat
windows10-2004-x64
3SYS/setting.ini
windows7-x64
SYS/setting.ini
windows10-2004-x64
1SYS/system.dat
windows7-x64
3SYS/system.dat
windows10-2004-x64
3bgm.arc
windows7-x64
3bgm.arc
windows10-2004-x64
3genmukan.exe
windows7-x64
1genmukan.exe
windows10-2004-x64
1pict.arc
windows7-x64
3pict.arc
windows10-2004-x64
3script.arc
windows7-x64
3script.arc
windows10-2004-x64
se.arc
windows7-x64
3se.arc
windows10-2004-x64
3voice0.arc
windows7-x64
3voice0.arc
windows10-2004-x64
Static task
static1
Behavioral task
behavioral1
Sample
MOVIE/ending.mpg
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MOVIE/ending.mpg
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
MOVIE/opening.mpg
Resource
win7-20221111-en
Behavioral task
behavioral4
Sample
MOVIE/opening.mpg
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
SYS/kidoku.dat
Resource
win7-20220901-en
Behavioral task
behavioral6
Sample
SYS/kidoku.dat
Resource
win10v2004-20221111-en
Behavioral task
behavioral7
Sample
SYS/setting.ini
Resource
win7-20221111-en
Behavioral task
behavioral8
Sample
SYS/setting.ini
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
SYS/system.dat
Resource
win7-20220812-en
Behavioral task
behavioral10
Sample
SYS/system.dat
Resource
win10v2004-20221111-en
Behavioral task
behavioral11
Sample
bgm.arc
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
bgm.arc
Resource
win10v2004-20220812-en
Behavioral task
behavioral13
Sample
genmukan.exe
Resource
win7-20220812-en
Behavioral task
behavioral14
Sample
genmukan.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
pict.arc
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
pict.arc
Resource
win10v2004-20221111-en
Behavioral task
behavioral17
Sample
script.arc
Resource
win7-20220901-en
Behavioral task
behavioral18
Sample
script.arc
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
se.arc
Resource
win7-20221111-en
Behavioral task
behavioral20
Sample
se.arc
Resource
win10v2004-20220812-en
Behavioral task
behavioral21
Sample
voice0.arc
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
voice0.arc
Resource
win10v2004-20221111-en
Errors
General
-
Target
Shinshou Genmukan.zip
-
Size
858.9MB
-
MD5
415223afba2d6da0d2deac8d4d3a0fdc
-
SHA1
dcf6adc51d09e027e5fee691b49ba747499371ae
-
SHA256
48707104c262c005422db897544d572344fecd4845492d301c61d76ee8a36cff
-
SHA512
09549704e603948928123343f80a0a442745c50cbc84be3a07110f5578bab202c9b7d453b6b255de2d49455fd40f14ac00c682c8b7d1227d3405201b447e03ae
-
SSDEEP
25165824:z2l2HZ8KVO8eM6OKIbCFllo33Q3E0xte5Jspm:KlA6739XRSQr4K0
Malware Config
Signatures
Files
-
Shinshou Genmukan.zip.zip
-
MOVIE/ending.mpg
-
MOVIE/opening.mpg
-
SYS/kidoku.dat
-
SYS/setting.ini
-
SYS/system.dat
-
bgm.arc
-
genmukan.exe.exe windows x86
2197ba06959953fe393ce9bfe2083306
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
kernel32
CreateFileA
SetCurrentDirectoryA
OutputDebugStringA
SetFilePointer
GetTickCount
EnterCriticalSection
LeaveCriticalSection
CompareStringW
CompareStringA
SetEndOfFile
GetStringTypeW
GetStringTypeA
GetSystemInfo
VirtualProtect
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
SetStdHandle
LoadLibraryA
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetFileSize
WideCharToMultiByte
WriteFile
GetCPInfo
GetOEMCP
GetFullPathNameA
SetUnhandledExceptionFilter
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
HeapSize
GetCurrentProcess
TerminateProcess
GetProcAddress
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
GetCurrentThreadId
QueryPerformanceCounter
HeapReAlloc
GetLocalTime
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetSystemTimeAsFileTime
HeapAlloc
CreateDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapFree
RtlUnwind
ExitProcess
ReadFile
GetLastError
GetTimeZoneInformation
GetModuleFileNameA
InterlockedExchange
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
DeleteFileA
FindFirstFileA
FindNextFileA
FindClose
MulDiv
lstrcpyA
GetCurrentProcessId
MultiByteToWideChar
GetCurrentDirectoryA
Sleep
GetDriveTypeA
ReleaseMutex
CloseHandle
OpenMutexA
CreateMutexA
InitializeCriticalSection
DeleteCriticalSection
SetEnvironmentVariableA
user32
GetMenu
PeekMessageA
wsprintfA
ModifyMenuA
EnableMenuItem
LoadIconA
GetSubMenu
SetCursor
CheckMenuItem
LoadMenuA
SetCapture
ReleaseCapture
BeginPaint
EndPaint
MessageBoxA
PostQuitMessage
LoadCursorA
ChangeDisplaySettingsA
GetCursorPos
RedrawWindow
SetMenu
GetPropA
DefWindowProcA
RemovePropA
SetRectEmpty
GetWindowLongA
AdjustWindowRectEx
RegisterClassA
SetPropA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
GetSystemMenu
RemoveMenu
ClientToScreen
EnumDisplaySettingsA
CreateWindowExA
GetParent
SetWindowPos
DestroyWindow
CreateDialogParamA
FillRect
SetDlgItemInt
ScreenToClient
EnableWindow
SetWindowLongA
ValidateRect
GetDlgItemTextA
GetFocus
SetWindowTextA
ShowWindow
MoveWindow
InvalidateRect
GetDC
ReleaseDC
SetCursorPos
GetWindowRect
SetRect
GetSystemMetrics
UpdateWindow
SetFocus
GetClientRect
DialogBoxParamA
EndDialog
SetDlgItemTextA
GetDlgItem
SendMessageA
GetDlgItemInt
SendDlgItemMessageA
gdi32
GetObjectA
EnumFontFamiliesA
CreateSolidBrush
GetPixel
StretchBlt
TextOutA
GetTextExtentPoint32A
CreateDIBSection
GetDeviceCaps
SetBkMode
SetTextColor
CreateFontIndirectA
DeleteObject
BitBlt
CreateDCA
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
comdlg32
ChooseColorA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellAboutA
ole32
CoUninitialize
CoInitialize
GetRunningObjectTable
CoCreateInstance
winmm
timeSetEvent
timeKillEvent
timeGetDevCaps
timeEndPeriod
timeBeginPeriod
mmioOpenA
mmioDescend
mmioClose
mmioSeek
mmioAscend
mciSendCommandA
timeGetTime
dsound
ord1
ddraw
DirectDrawCreate
msacm32
acmFormatSuggest
acmStreamOpen
acmStreamClose
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
imm32
ImmReleaseContext
ImmGetContext
ImmSetOpenStatus
Sections
.text Size: 508KB - Virtual size: 505KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
pict.arc
-
script.arc
-
se.arc
-
voice0.arc