Overview
overview
1Static
static
FrameStars...tle.js
windows7-x64
1FrameStars...tle.js
windows10-2004-x64
1FrameStars...min.js
windows7-x64
1FrameStars...min.js
windows10-2004-x64
1FrameStars...rap.js
windows7-x64
1FrameStars...rap.js
windows10-2004-x64
1FrameStars...min.js
windows7-x64
1FrameStars...min.js
windows10-2004-x64
1FrameStars...ter.js
windows7-x64
1FrameStars...ter.js
windows10-2004-x64
1FrameStars...x.html
windows7-x64
1FrameStars...x.html
windows10-2004-x64
1FrameStars...dex.js
windows7-x64
1FrameStars...dex.js
windows10-2004-x64
1FrameStars...min.js
windows7-x64
1FrameStars...min.js
windows10-2004-x64
1FrameStars...nav.js
windows7-x64
1FrameStars...nav.js
windows10-2004-x64
1FrameStars...e.html
windows7-x64
1FrameStars...e.html
windows10-2004-x64
1FrameStars...o.html
windows7-x64
1FrameStars...o.html
windows10-2004-x64
1FrameStars...b.html
windows7-x64
1FrameStars...b.html
windows10-2004-x64
1FrameStars...s.html
windows7-x64
1FrameStars...s.html
windows10-2004-x64
1FrameStars...a.html
windows7-x64
1FrameStars...a.html
windows10-2004-x64
1FrameStars...e.html
windows7-x64
1FrameStars...e.html
windows10-2004-x64
1FrameStars...m.html
windows7-x64
1FrameStars...m.html
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
FrameStars/Resources/CastleDB/castle.js
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
FrameStars/Resources/CastleDB/castle.js
Resource
win10v2004-20221111-en
Behavioral task
behavioral3
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap-select.min.js
Resource
win7-20220812-en
Behavioral task
behavioral4
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap-select.min.js
Resource
win10v2004-20221111-en
Behavioral task
behavioral5
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap.js
Resource
win7-20221111-en
Behavioral task
behavioral6
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap.js
Resource
win10v2004-20220901-en
Behavioral task
behavioral7
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap.min.js
Resource
win7-20220812-en
Behavioral task
behavioral8
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap.min.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral9
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/highlighter.js
Resource
win7-20221111-en
Behavioral task
behavioral10
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/highlighter.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral11
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/index.html
Resource
win7-20221111-en
Behavioral task
behavioral12
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/index.html
Resource
win10v2004-20221111-en
Behavioral task
behavioral13
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/index.js
Resource
win7-20220901-en
Behavioral task
behavioral14
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/index.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral15
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/jquery-1.9.1.min.js
Resource
win7-20221111-en
Behavioral task
behavioral16
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/jquery-1.9.1.min.js
Resource
win10v2004-20220812-en
Behavioral task
behavioral17
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/nav.js
Resource
win7-20221111-en
Behavioral task
behavioral18
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/nav.js
Resource
win10v2004-20221111-en
Behavioral task
behavioral19
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/ExitNode.html
Resource
win7-20220812-en
Behavioral task
behavioral20
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/ExitNode.html
Resource
win10v2004-20220901-en
Behavioral task
behavioral21
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/LevelInfo.html
Resource
win7-20220812-en
Behavioral task
behavioral22
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/LevelInfo.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral23
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/LevelMob.html
Resource
win7-20221111-en
Behavioral task
behavioral24
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/LevelMob.html
Resource
win10v2004-20221111-en
Behavioral task
behavioral25
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/LevelProps.html
Resource
win7-20221111-en
Behavioral task
behavioral26
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/LevelProps.html
Resource
win10v2004-20220901-en
Behavioral task
behavioral27
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/Meta.html
Resource
win7-20220812-en
Behavioral task
behavioral28
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/Meta.html
Resource
win10v2004-20221111-en
Behavioral task
behavioral29
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/RoomNode.html
Resource
win7-20220812-en
Behavioral task
behavioral30
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/RoomNode.html
Resource
win10v2004-20220812-en
Behavioral task
behavioral31
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/SeededRandom.html
Resource
win7-20221111-en
Behavioral task
behavioral32
Sample
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/SeededRandom.html
Resource
win10v2004-20221111-en
General
-
Target
FrameStars.zip
-
Size
4.5MB
-
MD5
39fcb05394aca3c18254f9215a00457a
-
SHA1
6acc39b2e936d7d3a6a818e595f68f7d6a00a2bb
-
SHA256
46f67efe4298ad70588b51fb0837225a4157d94b7b92204559160d42bd78f658
-
SHA512
997736409564f5947cd8b661f971649d22be536099dc6d3b08f08beebc7fdb491a29d1296af81e419533899eef38eb54b00ed67517fdd626a78721f269610afc
-
SSDEEP
98304:I/7wgvVZapwzsvEcUVGHKnwVFHS7hry09eXFNG5/WLTx2iw4Vy7C3:I3Sw3hVGcwVFy7NoNG5/WLlfdVy7C3
Malware Config
Signatures
Files
-
FrameStars.zip.zip
Password: test
-
FrameStars/Resources/CastleDB/castle.js.js
-
FrameStars/Resources/Other/Fog/0001.swatchbin
-
FrameStars/Resources/Other/Fog/0002.swatchbin
-
FrameStars/Resources/Other/Fog/0003.swatchbin
-
FrameStars/Resources/Other/Fog/0004.swatchbin
-
FrameStars/Resources/Other/FrameData.xml
-
FrameStars/Resources/Other/GroundLighting/base.swatchbin
-
FrameStars/Resources/Other/Lighting/0001.swatchbin
-
FrameStars/Resources/Other/Lighting/0002.swatchbin
-
FrameStars/Resources/Other/Lighting/0003.swatchbin
-
FrameStars/Resources/Other/Lighting/0004.swatchbin
-
FrameStars/Resources/Other/Motion/0001.swatchbin
-
FrameStars/Resources/Other/Motion/0002.swatchbin
-
FrameStars/Resources/Other/Shadows/0001.swatchbin
-
FrameStars/Resources/Other/Shadows/0002.swatchbin
-
FrameStars/Resources/Other/Shadows/0003.swatchbin
-
FrameStars/Resources/Other/Shadows/0004.swatchbin
-
FrameStars/Resources/Other/Shadows/0005.swatchbin
-
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/css/bootstrap-responsive.css
-
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/css/bootstrap-responsive.min.css
-
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/css/bootstrap-select.min.css
-
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/css/bootstrap.css
-
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/css/bootstrap.min.css
-
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/img/glyphicons-halflings-white.png.png
-
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/img/glyphicons-halflings.png.png
-
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap-select.min.js.js
-
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap.js.js
-
FrameStars/Resources/Scripts/TechnicalDocumentation/bootstrap/js/bootstrap.min.js.js
-
FrameStars/Resources/Scripts/TechnicalDocumentation/favicon.ico
-
FrameStars/Resources/Scripts/TechnicalDocumentation/haxe-nav.css
-
FrameStars/Resources/Scripts/TechnicalDocumentation/highlighter.css
-
FrameStars/Resources/Scripts/TechnicalDocumentation/highlighter.js.js
-
FrameStars/Resources/Scripts/TechnicalDocumentation/index.html.html
-
FrameStars/Resources/Scripts/TechnicalDocumentation/index.js.js
-
FrameStars/Resources/Scripts/TechnicalDocumentation/jquery-1.9.1.min.js.js
-
FrameStars/Resources/Scripts/TechnicalDocumentation/nav.js.js
-
FrameStars/Resources/Scripts/TechnicalDocumentation/styles.css
-
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/ExitNode.html.html
-
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/LevelInfo.html.html
-
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/LevelMob.html.html
-
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/LevelProps.html.html
-
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/Meta.html.html
-
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/RoomNode.html.html
-
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/SeededRandom.html.html
-
FrameStars/Resources/Scripts/TechnicalDocumentation/tool/mod/script/Struct.html.html
-
FrameStars/Resources/Scripts/TechnicalDocumentation/triangle-closed.png.png
-
FrameStars/Resources/Scripts/TechnicalDocumentation/triangle-opened.png.png
-
FrameStars/Resources/cardIcons.png.png
-
FrameStars/Resources/cols.png.png
-
FrameStars/Resources/links.png.png
-
FrameStars/setup_1672169229.405364.exe.exe windows x86
Password: test
de8f5d2b42d594f1a34c0527faf20b12
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
FreeConsole
AssignProcessToJobObject
GetThreadPriorityBoost
MulDiv
GetCurrentThreadId
GetCurrentThread
GetProcessHeap
GlobalDeleteAtom
LocalUnlock
AreFileApisANSI
CreateFileW
GetFileType
GetFileTime
LockFile
GetCurrentProcess
CreateMutexW
SetStdHandle
GetConsoleCursorInfo
lstrcatW
GetCommandLineA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 493B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ