663a6080e5b84ad8fc8e3fc320c399b4381010f70fdd9791f4a7490aa3260057

Sharing

Copy URL

Twitter E-mail

General

Target

663a6080e5b84ad8fc8e3fc320c399b4381010f70fdd9791f4a7490aa3260057
Size

3.6MB
MD5

705c9de774cae7de2161d69ece81d103
SHA1

b86de98eea41920b3bac40b7be7220d80d7d9501
SHA256

663a6080e5b84ad8fc8e3fc320c399b4381010f70fdd9791f4a7490aa3260057
SHA512

6ae41a44755134b0b2476ab5ce4ff55b054696de69d3b563c0304d3062ccf7715f75861ede1b45db4a48e968c4fc54117c015cf9a79bf30360774c45e7f18676
SSDEEP

98304:+/kZobnzhKG9U1CCpZonTzHK53nkca9c/Nu07IuWx:ZZor4eHCpUPHM3nbfFuvx

Score

N/A

Malware Config

Signatures

Files

663a6080e5b84ad8fc8e3fc320c399b4381010f70fdd9791f4a7490aa3260057
.exe windows x86

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Exports

Exports

MainOutMessageAPI
TBaseObject_GetAttackPower
TBaseObject_IsProperTarget
TBaseObject_MagBubbleDefenceUp
TBaseObject_MagMakeDefenceArea
TBaseObject_SendRefMsg
TBaseObject_WAbility
TBaseObject_boDeath
THeroObject_SendDelItem
TPlayObject_GetPlayObjectTick
TPlayObject_IsEnoughBag
TPlayObject_PlayUseItems
TPlayObject_SendAddItem
TPlayObject_SendDelItem
TPlayObject_SendSocket
TPlayObject_SetPlayObjectTick
TPlugOfEngine_GetProductVersion
TPlugOfEngine_GetUserMode
TPlugOfEngine_GetUserName
TPlugOfEngine_GetUserNameInit
TPlugOfEngine_GetUserVersion
TPlugOfEngine_HealthSpellChanged
TPlugOfEngine_HealthSpellChanged1
TUserEngine_AddMagic
TUserEngine_CopyToUserItemFromName
TUserEngine_GetMagicList
TUserEngine_GetPlayObject
TUserEngine_GetPlayObjectCount
TUserEngine_GetStdItemByIndex
TUserEngine_GetStdItemByName
TUserEngine_GetStdItemList

Sections

Size: 1.8MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 151KB - Virtual size: 709KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

chsimeyn
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

abxgyhid
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

Imports

kernel32

comctl32

Exports

Exports

Sections

Size: 1.8MB - Virtual size: 5.5MB

.rsrc Size: 151KB - Virtual size: 709KB

.idata Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 2.0MB

chsimeyn Size: 1.6MB - Virtual size: 1.6MB

abxgyhid Size: 512B - Virtual size: 4KB

.rsrc
Size: 151KB - Virtual size: 709KB

.idata
Size: 512B - Virtual size: 4KB

chsimeyn
Size: 1.6MB - Virtual size: 1.6MB

abxgyhid
Size: 512B - Virtual size: 4KB