Static task
static1
Behavioral task
behavioral1
Sample
59045999f8dbf8c88befa2b980244c6d225d5342f8e952999509d82ea0e8fa40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
59045999f8dbf8c88befa2b980244c6d225d5342f8e952999509d82ea0e8fa40.exe
Resource
win10v2004-20221111-en
General
-
Target
59045999f8dbf8c88befa2b980244c6d225d5342f8e952999509d82ea0e8fa40
-
Size
288KB
-
MD5
7937753871c628d986c6380832d4fb58
-
SHA1
0b8d4bfed78f14a17de8e8eed393963c27e6ba3f
-
SHA256
59045999f8dbf8c88befa2b980244c6d225d5342f8e952999509d82ea0e8fa40
-
SHA512
fc3f58837ce4bec955d14f91a7320fc5a664e7b40f0aba620acd20e9cb56d186171d818311d939f4b9aa44b3486aec14e5eca22e3ac16094c32e8d17934845ae
-
SSDEEP
6144:JzSXFA1EJnsVAGiAjZ5b1qTdwKPmvrVbLQvXpg/NxVjXnlJ:JzSXFA1EJnsVAGiAjZ5Z4GKuRbLqpkNh
Malware Config
Signatures
Files
-
59045999f8dbf8c88befa2b980244c6d225d5342f8e952999509d82ea0e8fa40.exe windows x86
ccda7238f337f5442af5e670fcab83d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapSize
RtlUnwind
ExitProcess
GetProcAddress
TerminateProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
GetOEMCP
GetCPInfo
SetUnhandledExceptionFilter
HeapCreate
GetVersionExA
HeapDestroy
IsBadWritePtr
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualFree
IsBadCodePtr
SetFilePointer
LoadLibraryA
SetStdHandle
FlushFileBuffers
GetLastError
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
GetCurrentProcess
FlushInstructionCache
GetProcessHeap
HeapAlloc
WideCharToMultiByte
FindResourceExA
LoadResource
LockResource
SizeofResource
FindResourceA
RaiseException
GetCurrentThreadId
Sleep
WritePrivateProfileStringA
GetModuleHandleA
lstrcpyA
GetTickCount
GetModuleFileNameA
GetPrivateProfileIntA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
IsBadReadPtr
CloseHandle
user32
FrameRect
GetParent
GetWindow
SystemParametersInfoA
MapWindowPoints
GetWindowTextLengthA
GetWindowTextA
RedrawWindow
EndPaint
BeginPaint
MoveWindow
UnregisterClassA
GetWindowLongA
DefWindowProcA
PostMessageA
GetCapture
ReleaseCapture
OffsetRect
GetDlgItem
SetWindowLongA
DestroyWindow
CreateDialogParamA
EnableWindow
FlashWindow
SetCursor
LoadCursorA
PtInRect
BringWindowToTop
GetActiveWindow
FillRect
SetTimer
IsWindowVisible
ShowWindow
GetClientRect
GetWindowRect
SetWindowPos
SetWindowTextA
LoadIconA
SendMessageA
CallWindowProcA
gdi32
SelectObject
CreateCompatibleDC
StretchBlt
GetStockObject
SetTextColor
SetBkMode
DeleteObject
BitBlt
DeleteDC
CreateSolidBrush
CreateFontIndirectA
CreatePatternBrush
shell32
ShellExecuteA
asdeatlgameframe
?ApplyText@CTextUnit@@QAEXPAD@Z
?OnOk@CDialog@@QAEJGGPAUHWND__@@AAH@Z
?AsdeInitApplication@@YAJPAUHINSTANCE__@@HPBD111J@Z
?Create@CMainFrame@@QAEPAUHWND__@@PAU2@V_U_RECT@ATL@@PBDKKV_U_MENUorID@4@PAX@Z
?AsdeTimerRunApplication@@YAJHK@Z
?AsdeUnInitApplication@@YAXXZ
?GetBitmap@CGdiBitmap@@QAEPAUHBITMAP__@@XZ
?GetBmpInfo@CGdiBitmap@@QAEAAUtagBITMAP@@XZ
?GetSkinImage@CFaceUI@@QAEPAVCGdiBitmap@@XZ
?SubClass@CSkinButton@@QAEXPAUHWND__@@@Z
?GetUIFace@CSkinResouce@@QAEPAVCFaceUI@@PBD0@Z
?SetSkin@CSkinButton@@QAEXPAVCFaceButton@@@Z
?SubClass@CSkinStatic@@QAEXPAUHWND__@@@Z
??0CDDrawSurface@@QAE@PAUIDirectDrawSurface@@@Z
??1CDDrawSurface@@QAE@XZ
??0CDDrawSurface@@QAE@XZ
?LVShow@CViewUnit@@QAEXEH@Z
?LVRefresh@CViewUnit@@QAEXH@Z
?GetBackBuffer@CDisplay@@QAEPAVCDDrawSurface@@XZ
??0CDDrawRender@@QAE@PAVCDDrawSurface@@@Z
?BltAlpha@CDDrawRender@@QAEJKKPAVCDDrawSurface@@0PAUtagRECT@@0KK@Z
??1CDDrawRender@@QAE@XZ
?LVChangeRect@CViewUnit@@QAEXHHHHH@Z
?ReSetRect@CViewUnit@@QAEXAAUtagRECT@@@Z
?OnDraw@CSingleUnit2@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDraw@CSingleUnit@@UAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?CTextUnit_DisConstruct@CTextUnit@@CAXPAV1@@Z
?CTextUnit_Construct@CTextUnit@@CAXPAV1@@Z
?OnDrawText@CTextUnit@@UAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
?CMainFrame_DisConstruct@CMainFrame@@CAXPAV1@@Z
?CMainFrame_Construct@CMainFrame@@CAXPAV1@PADFAAVCMainFrameTraits@@W4AD_GAME_TYPE@@@Z
?CDialog_DisConstruct@CDialog@@CAXPAV1@@Z
?CDialog_Construct@CDialog@@CAXPAV1@IPBD@Z
??0CViewRect@@QAE@XZ
?__init__@CViewUnit@@AAEXHHHHE@Z
??1CViewRect@@QAE@XZ
?ProcessWindowMessage@CSkinStatic@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinButton@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessWindowMessage@CSkinCheckBox@@UAEHPAUHWND__@@IIJAAJK@Z
?SendPackage@CMainFrame@@QAEHPADG_N@Z
?AsdeForceExitApplication@@YAJHH@Z
?GetGameSaveHandle@CMainFrame@@QAEPAVCGameSave@@XZ
?Attach@CSingleUnit2@@QAEJAAUtagRECT@@PAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@3@Z
?CreateWave@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?CreateOgg@CSoundManager@@QAEJPAPAVCSoundBuffer@@PADKU_GUID@@K@Z
?SetToEVolume@CSoundManager@@QAEXPAVCSoundBuffer@@@Z
?GetDDSurf@CDDrawSurface@@QAEPAUIDirectDrawSurface@@XZ
?CreateFromBitmap@CDDrawSurface@@QAEJPAVCDisplay@@PBDKK@Z
?SeatClientToServer@CMainFrame@@QAEFF@Z
?MessageBoxA@CMainFrame@@QAEHPBD0I@Z
?ProcessWindowMessage@CDialog@@UAEHPAUHWND__@@IIJAAJK@Z
?ProcessFrameEvent@CDialog@@UAEHIJAAJ@Z
?DoModal@CDialog@@QAEHPAUHWND__@@J@Z
?LoadImageA@CImageResource@@SAPAUHBITMAP__@@PBDKK@Z
?FreeSkin@CSkinResouce@@SAXAAPAV1@@Z
?Destroy@CDDrawSurface@@QAEJXZ
?GetCmdPlayerInfoAtServerSeat@CMainFrame@@QAEPAUPLAYERINFO@@F@Z
?DisplayChatText@CMainFrame@@QAEHV?$CStringT@DV?$StrTraitATL@DV?$ChTraitsCRT@D@ATL@@@ATL@@@ATL@@0H@Z
?GetSoundManager@CMainFrame@@QAEPAVCSoundManager@@XZ
?PlayESound@CSoundManager@@QAEXPAVCSoundBuffer@@KK@Z
?GetDeskViewUnit@CMainFrame@@QAEPAVCViewUnit@@XZ
?AttachUnit@CViewManager@@QAEXPAVCViewUnit@@GG@Z
?Create@CDDrawSurface@@QAEJPAVCDisplay@@PAU_DDSURFACEDESC@@@Z
?Attach@CSingleUnit2@@QAEJPAVCViewManager@@GGIPAUtagPOINT@@PAVCImageResource@@2@Z
?DetchSelf@CViewUnit@@QAEXXZ
?Attach@CSingleUnit@@QAEJPAVCViewManager@@GGIPAVCImageResource@@1@Z
?GetGameRect@CMainFrame@@QAEXPAUtagRECT@@@Z
?SeatServerToClient@CMainFrame@@QAEFF@Z
?Attach@CTextUnit@@QAEJAAUtagRECT@@PAVCViewManager@@GGPAVCDevice@@KPAUHFONT__@@IHKKK@Z
?LVMoveTo@CViewUnit@@QAEXHHH@Z
?SendFrameOperation@CMainFrame@@QAEHIJAAJ@Z
?GetViewManager@CMainFrame@@QAEPAVCViewManager@@XZ
?AllocLayers@CViewManager@@QAEXG@Z
?GetDrawDevice@CMainFrame@@QAEPAVCDevice@@XZ
?BuildPlayerListCtrlColumn@CMainFrame@@QAEJJPAUPLColumnInfo@@@Z
?LoadSkin@CSkinResouce@@SAPAV1@PAD@Z
?AsdeSetSkin@@YAPAVCSkinResouce@@PAV1@@Z
?ReSetRect@CViewUnit@@QAEXHHHH@Z
?OnDrawText@CTextUnit270@@EAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
?OnDraw@CTextUnit@@EAEJPAVCDevice@@AAUtagRECT@@HPAX@Z
?OnDetchFrom@CTextUnit@@EAEXPAUCViewLayer@@PAUCViewArea@@@Z
?OnDrawText@CTextUnit090@@EAEHPAUHDC__@@0PAVCImageResource@@1UtagRECT@@PBDHIPAUHFONT__@@KKK@Z
?ProcessFrameEvent@CMainFrame@@UAEHIJAAJ@Z
?ProcessSocketXieYi@CMainFrame@@UAEHIAAVbistream@Win32Tools@@AAJK@Z
?ProcessWindowMessage@CMainFrame@@UAEHPAUHWND__@@IIJAAJK@Z
?GetCmdInfo@CMainFrame@@QAEAAUCMDINFO@@XZ
?GetMyInfo@CMainFrame@@QAEPAUPLAYERINFO@@XZ
?Blt@CDDrawRender@@QAEJKKPAVCDDrawSurface@@PAUtagRECT@@K@Z
?SubClass@CSkinCheckBox@@QAEXPAUHWND__@@@Z
?UnlockDC@CDDrawSurface@@QAEJPAUHDC__@@@Z
?LockDC@CDDrawSurface@@QAEPAUHDC__@@XZ
?SetSkin@CSkinCheckBox@@QAEXPAVCFaceCheckBox@@@Z
ruleedit
??0CRuleConfig@@QAE@XZ
?GetNumericConfig@CRuleConfig@@QAEHIAA_J_J@Z
??1CRuleConfig@@QAE@XZ
?PraseRuleString@CRuleConfig@@QAEHPBD0@Z
gamesave
?SnapStep@CGameSave@@QAEHIAAGAAK1AAPAD@Z
Sections
.text Size: 192KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�u� Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE