GETMODULEOBJECT
Static task
static1
Behavioral task
behavioral1
Sample
af79f28b1f6d541499897bb754bf91e2b91ee98baa4cadc345850b797da1ca3f.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af79f28b1f6d541499897bb754bf91e2b91ee98baa4cadc345850b797da1ca3f.dll
Resource
win10v2004-20221111-en
General
-
Target
af79f28b1f6d541499897bb754bf91e2b91ee98baa4cadc345850b797da1ca3f
-
Size
348KB
-
MD5
652bd60a503ee5fc3091a8548d114e7f
-
SHA1
b8211563966a426ac183afb22214057096c26e62
-
SHA256
af79f28b1f6d541499897bb754bf91e2b91ee98baa4cadc345850b797da1ca3f
-
SHA512
6f3f67e794795510c83faeb91522a4beb9fe57af96497199a9e167dfeb7a9bbccc3081ab61bed56105cc65dc6ef618c3efa06ccd69be05d56712e14eeea9107b
-
SSDEEP
3072:7+wwwpI+JzWCCdjRpt3DJB2NmPq8pHhL6/V54VjnDoElVHrfHMqaD1Y5FU8iPLim:7++hhCdZPq3f4VjnDwqJ6HjzG7diaa
Malware Config
Signatures
Files
-
af79f28b1f6d541499897bb754bf91e2b91ee98baa4cadc345850b797da1ca3f.dll windows x86
37eea5e1aa1dbe8951f73000f41d7c90
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
WideCharToMultiByte
CreateThread
CloseHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetLocaleInfoW
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryA
InterlockedExchange
FreeLibrary
SetConsoleCtrlHandler
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
FatalAppExitA
WriteFile
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
HeapSize
Sleep
GetCurrentThread
InterlockedDecrement
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetProcAddress
GetModuleHandleA
GetLastError
RtlUnwind
RaiseException
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
GetCurrentThreadId
CreateEventW
SetEvent
GetTickCount
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
user32
PostMessageW
wsprintfW
coolfire2gfxlib
?Animation_Create@pgAnimation@framework@@SAPAV12@PBG@Z
?destroy@pgAnimation@framework@@QAEXXZ
?setHTexture@Material@core@@QAEXPAUIDirect3DBaseTexture8@@@Z
??0FrameWorkApplication@framework@@QAE@XZ
?getQuad@hgeSprite@core@@QAEPAUpgQuad@2@XZ
??1FrameWorkApplication@framework@@QAE@XZ
?update@FrameWorkApplication@framework@@UAEXM@Z
?WindowProc@FrameWorkApplication@framework@@UAEJIIJPAH@Z
?ForceShutdown@FrameWorkApplication@framework@@UAEII@Z
?openPakFile@FrameWorkApplication@framework@@QAE_NPBG@Z
?doAddCredits@FrameWorkApplication@framework@@UAEXH@Z
?play@pgAnimation@framework@@QAEX_N@Z
?Sprite_Create@pgSprite@framework@@SAPAV12@PBGPAX@Z
?Sprite_Create@pgSprite@framework@@SAPAV12@PBGHHHH@Z
?getHeight@pgSprite@framework@@QBEJXZ
?render@pgAnimation@framework@@QAEXHH@Z
?update@pgAnimation@framework@@QAEHM@Z
?GetTexture@hgeSprite@core@@QBEPAVITexture@2@XZ
?getSprite@pgSprite@framework@@QAEPAVhgeSprite@core@@XZ
?render@pgSprite@framework@@QAEXXZ
?printf@pgFont@framework@@QAAXMMHPBDZZ
?getVisible@pgObject@framework@@QBE?B_NXZ
?SetStatus@pgButton@framework@@QAEXW4pgButtonstatus@12@@Z
?destroy@pgButton@framework@@QAEXXZ
?GetStatus@pgButton@framework@@QAE?AW4pgButtonstatus@12@XZ
?destroy@pgSprite@framework@@QAEXXZ
?getGfxEngine@FrameWorkApplication@framework@@QBEPAVCGE@core@@XZ
?doStopAutotesting@ISGClientModule@@UAEXXZ
?setPosition@pgObject@framework@@QAEXU?$pgPoint2@J@math@@@Z
??ASounds@framework@@QAEPAVISoundInterface@SFX@@PBG@Z
?instance@?$Singleton@VSounds@framework@@@@SAPAVSounds@framework@@XZ
?setColor@pgFont@framework@@QAEXK@Z
?GetStringWidth@pgFont@framework@@QBEMPBG@Z
?getGameModule@FrameWorkApplication@framework@@QBEPAVISGClientGame@@XZ
?printf@pgFont@framework@@QAAXMMHPBGZZ
?add@Sounds@framework@@QAEXPBG0@Z
?doStartAutogame@ISGClientModule@@UAEXXZ
?doStopAutogame@ISGClientModule@@UAEXXZ
?isAutogameEnabled@ISGClientModule@@UBE_NXZ
?doStartAutotesting@ISGClientModule@@UAEXXZ
?setTextureRect@pgSprite@framework@@QAEXMMMM@Z
?isAutotestingEnabled@ISGClientModule@@UBE_NXZ
?beginRender@FrameWorkApplication@framework@@QAEXXZ
?StartGame@FrameWorkApplication@framework@@UAEIPAVISGClientGame@@PAUHWND__@@1_JJJJJ@Z
?incomingTextMessage@FrameWorkApplication@framework@@UAEIPAUincomingtextmessage@ISGCIncomingTextMessage@@@Z
?Receive@FrameWorkApplication@framework@@UAEIPAEI@Z
?SetISocket@FrameWorkApplication@framework@@UAEIPAVISGClientSoket@@@Z
?setColor@pgSprite@framework@@QAEXK@Z
?getPosition@pgObject@framework@@QBEABU?$pgPoint2@J@math@@XZ
?Font_Create@pgFont@framework@@SAPAV12@PAVISGClientGame@@PBG_N@Z
?Button_Create@pgButton@framework@@SAPAV12@PBG@Z
?setPosition@pgObject@framework@@QAEXJJ@Z
?Sprite_Create@pgSprite@framework@@SAPAV12@PBG0@Z
?destroy@pgFont@framework@@QAEX_N@Z
?SetScale@pgFont@framework@@QAEXM@Z
winmm
timeGetTime
avformat-55
av_find_stream_info
av_read_frame
av_register_all
av_seek_frame
avformat_alloc_context
avformat_close_input
avformat_free_context
avformat_open_input
avio_alloc_context
avcodec-55
av_free_packet
avcodec_close
avcodec_decode_video2
avcodec_find_decoder
avcodec_flush_buffers
avcodec_open2
avpicture_fill
avpicture_get_size
avutil-52
av_frame_alloc
av_frame_free
av_free
av_malloc
swscale-2
sws_getContext
sws_scale
Exports
Exports
Sections
.text Size: 260KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ