c66259992a68fce9f1d44a243a9f214f6fc682afb457997360647eab4d41610e

Sharing

Copy URL Twitter E-mail

General

Target

c66259992a68fce9f1d44a243a9f214f6fc682afb457997360647eab4d41610e
Size

1.1MB
MD5

171dc68761243aff7c59770f0acc9584
SHA1

59ded5defb2af466f909485eec38070a09cfbaf4
SHA256

c66259992a68fce9f1d44a243a9f214f6fc682afb457997360647eab4d41610e
SHA512

c704e72ae4e31b35cb7cdeefe23a82ae3871c003ccce121e3ec0b5eac4972a16dd36ee57f37d507504be9a22da180795f369c23e97cac37e1bedef97789249ca
SSDEEP

24576:xp8hCOvGkD8Gh6ikwcm/Ujw+Tuexq67tTr5l8:LE1xkwcFE+lq67tTtC

Score

N/A

Malware Config

Signatures

Files

c66259992a68fce9f1d44a243a9f214f6fc682afb457997360647eab4d41610e
.exe windows x86

49005ded7f14ac7a2f72db1fef57110a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gpigame

AdjustViewport
GetMapShowName
OnInitVideoSys
StdOutRedirect
GetProfileFlag
SetGameStartFromWhere
Create
GetFileDirectoryAllFile
Test
DoFile
MoveForwardBack
UpdateSelect
GetGlobalInt
GetDataPacket
GetPlayerInfo
RenderString
UpdateViewFrame
GetScrHeight
GetScrWidth
VideoFrameMove
OnVideoBegin
GetSnapAction
GetPlayVelocity
LiveMsg
GetSec
GetUIPerf
SetVideoModle
GetRecorderByIdx
CreateLiveModelVideoFile
LiveToEnd
FullVideoFileSessionInfo
VideoSpeedOn
ResetPlayVelocity
GetRecorderFileInfo
LoadVideoHeadNode
IsGetLiveEndCmd
ClearBuffer
LoadRecorderFile
GetVideoFileVersionInfo
GameEventLiveUpdateAegisInfo
SetGameingTimeInLive
GetRecorderCount
AddNewLiveSnapShotDesc
ResetLiveCmdsPos
GameMsgDoCmd
LogAttr
GameEventLoadingStep
SetScoreInfo
?GetPlayerOfflineCodeLangString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@H@Z
UploadReplay
FileUpdateStep
GameEventStateWait
GameEventLiveSpectatorInfo
GetGameCheckSum
AddAttrLog
GetSnap
GetSnapData
GetCtrlID
GetSkinFile7
GetPlayerByID
SetSnap
LoadSnapFromServer
SetSnapData
SnapReset
GetCheckSumData
EnableSaveSrcData
SaveVideoFileOnErrorEvent
HandleKeyEvent
UpdateErrorInfo
SetFSMinimized
IsFullScreen
GameEventWatchInfo
RecvUpdateFile
GetGameScoreType
GameEventSMLRet
SetSelSnap
GetLoaclSnapListCount
LiveModelLoadSnapFromServer
LoadSessionNode
LoadVideoSrcFileNode
GetLiveCfgWateTime
ShowLiveGuage
GetVideoSnapCount
GetUpdateFile
GameEventLoading
GetLoginInfo
SelectOutputLogLevel
SetLogFileLevel
SetLoadMap
GameInit
SetJoinGame
EnableNetwork
Free
Realloc
Malloc
QueryTotalMem
QueryMem
ErrorLog
AddRecorder
Run
AddAppendExplain
SetDebugLevel
GameEventPlatInfo
GameEventRoomInfo
GameEventItemInfo
AddOption
SetOptionInfo
RefreshPlayerInfo
Patch_Hook
Patch_Insert
SetPlayerInfo
AddPlayer
UpdateMapID
SetSessionInfo
SetCtrlInfo
GameEventJoinGame
UpdateSessionID
GameEventLookerSetIP
GameEventLookerKick
GameEventLookerJoin
SetVideoServerSnapCount
FriendChat
GroupChat
ClearFriendList
AddFriends
GetGameLogicFrame
SetLoginRes
AddFriendsEnd
SystemChat
PlatRequestAddFriend
PlatAddFriendRet
SmallSpeakerLive
GameLiveVoteRtn
LiveMsgCancel
LiveChat
InitLuaDataBuffer
GetPlayerIDByName
GameLiveLabaRtn
SmallSpeaker
GameEventLookerPlayerInfo
SetMediaEnable
PipeAppProc
GetVerString
AddSessionJoinInfo
SetScriptRandSeed
GameRun
SetFPS
GetVideoAndLivePauseState
IsGameLogicPause
PauseGameLogic
GetSessionInfo
GetHostPlayerID
GameEventMyTurnBlock
Reconnect
UpdatePing
RenderPrint
GameEventTurnBlock
GetLogicFrame
UpdateHostAddr
UpdatePlatformVer
UpdatePlayerName
SetGameStartTime
GetLogPath
InitLogCtrl
SetOpenUIEditorFunc
SetLazyLoadCFXEffectSystem
UtilGetUsedMem
InsideVersion
EnableRoleMode
VLog
OutputDbgString
SetReplayFileName
SetManualReplayPath
?GetLangString@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@PBD0@Z
GetExecVersion
UpdateExecGameVer
SetWindowTimeCost
GetScriptVer
UpdateScriptVer
GetMapVer
UpdateMapVer
UpdateMapName
EndLogCtrl
End
DoString
SetCorePath
IsBeginSelect
Win32Msg
IsMapOK
GameEventCloseWindow
HandleCharEvent

kernel32

SetStdHandle
SetConsoleCtrlHandler
HeapReAlloc
VirtualAlloc
FatalAppExitA
VirtualFree
HeapCreate
HeapDestroy
GetConsoleMode
GetConsoleCP
HeapSize
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
CompareStringW
CompareStringA
GetCPInfo
GetFileType
LCMapStringA
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetStartupInfoA
GetCommandLineA
ExitThread
ExitProcess
RtlUnwind
RaiseException
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetLocaleInfoA
InterlockedDecrement
InterlockedIncrement
SetFilePointer
SetHandleCount
FlushFileBuffers
FreeEnvironmentStringsA
CreateMutexA
OpenMutexA
CloseHandle
UnmapViewOfFile
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
CreateFileW
SetEndOfFile
SetEnvironmentVariableA
GetFileSize
lstrlenW
FreeLibrary
GetModuleFileNameA
HeapFree
LoadLibraryA
GetProcAddress
GetLastError
LCMapStringW
CreateSemaphoreW
ReleaseSemaphore
CreateMutexW
GetModuleHandleW
ReleaseMutex
InterlockedExchange
InterlockedCompareExchange
GetVersionExW
GetSystemInfo
CreateIoCompletionPort
PostQueuedCompletionStatus
GetQueuedCompletionStatus
GetSystemTimeAsFileTime
CreateDirectoryA
CopyFileA
GetPrivateProfileSectionA
FindFirstFileA
FindNextFileA
FindClose
GetFileAttributesA
SetFileAttributesA
OutputDebugStringA
WaitNamedPipeA
SetNamedPipeHandleState
WriteFile
PeekNamedPipe
ReadFile
RemoveDirectoryA
GetProcessHeap
HeapAlloc
MapViewOfFile
AllocConsole
SetConsoleTitleA
GetStdHandle
SetConsoleScreenBufferSize
WaitForSingleObject
SetEvent
lstrcmpA
DuplicateHandle
TerminateThread
IsBadReadPtr
lstrcpynA
lstrlenA
IsBadWritePtr
SuspendThread
GetThreadContext
ResumeThread
SetLastError
GetCurrentThread
ReadProcessMemory
GetVersionExA
CreateFileA
GetCurrentThreadId
GetCurrentProcess
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentDirectoryA
DeleteFileA
CreateThread
SetThreadPriority
CreateEventA
WaitForMultipleObjects
MultiByteToWideChar
OpenProcess
SetCurrentDirectoryA
GetPrivateProfileIntA
Sleep
GetTickCount
GetLocalTime
GetModuleHandleA
CreateToolhelp32Snapshot
Process32First
Process32Next
WideCharToMultiByte
OpenFileMappingA
FormatMessageA
GetCurrentProcessId

user32

IsWindow
GetDesktopWindow
DrawTextA
CreateDialogParamA
GetDlgItem
SetTimer
CheckDlgButton
LoadBitmapA
SendDlgItemMessageA
IsDlgButtonChecked
ReleaseCapture
SetDlgItemTextA
GetCursorPos
GetDC
AdjustWindowRect
SetWindowPos
GetClientRect
GetWindowTextA
SetWindowTextA
SetFocus
LoadStringA
MessageBoxA
LoadAcceleratorsA
PeekMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
UnhookWindowsHookEx
CreateWindowExA
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassExA
ShowWindow
SetForegroundWindow
SendMessageA
BeginPaint
EndPaint
PostQuitMessage
SetActiveWindow
SetWindowLongA
DestroyWindow
DialogBoxParamA
SetWindowsHookExA
EndDialog
IsIconic
GetWindowDC
ReleaseDC
GetWindowTextW
DrawTextW
LoadImageA
GetWindowLongA
FillRect
PtInRect
TrackMouseEvent
GetAsyncKeyState
IsZoomed
PostMessageA
GetWindowRgn
SetWindowRgn
ScreenToClient
InflateRect
GetSystemMetrics
SystemParametersInfoA
GetWindowRect
DefWindowProcA
wsprintfA

gdi32

BitBlt
GetObjectA
CreateSolidBrush
SelectClipRgn
SetTextColor
FrameRgn
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
SetBkColor
SelectObject
StretchBlt
CreateRoundRectRgn
CreateRectRgn
CombineRgn
SetBkMode
CreateFontIndirectA
DeleteObject

advapi32

RegOpenKeyA
RegQueryValueExA

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

oleaut32

SysFreeString
SysStringLen
SysAllocString
VariantClear
GetErrorInfo
VariantChangeType
VariantInit
SetErrorInfo
CreateErrorInfo

shlwapi

PathIsRelativeA
PathCombineA
PathRelativePathToA
PathFileExistsA
PathRemoveFileSpecA

ws2_32

WSACleanup
inet_ntoa
ntohl
inet_addr
WSAGetLastError
WSASetLastError
htonl
htons
send
recv
WSASocketW
getsockopt
select
shutdown
WSARecv
WSASend
socket
bind
ioctlsocket
getsockname
ntohs
setsockopt
WSASocketA
connect
closesocket
WSAStartup

psapi

GetModuleFileNameExA

dbghelp

SymFunctionTableAccess
SymGetModuleBase
SymGetLineFromAddr
SymCleanup
SymLoadModule
SymInitialize
SymSetOptions
SymGetOptions
SymGetSymFromAddr
StackWalk

comctl32

ImageList_Add
ImageList_Create
ord17

iphlpapi

GetAdaptersInfo

Exports

Exports

??4MPEditor@@QAEAAV0@ABV0@@Z
?GetBrush@MPEditor@@QAEHXZ
?GetColor@MPEditor@@QAEKXZ
?GetCursor@MPEditor@@QAEPAVMPSceneObject@MindPower@@XZ
?GetPlayerName@@YAPA_WXZ
?GetPlusState@LuaServer@@QAEAAVLuaStateOwner@LuaPlus@@XZ
?GetSelectSceneObj@MPEditor@@QAEPAVCSceneObj@@XZ
?IsEditorDebugMode@MPEditor@@QAEHXZ
?IsEnable@MPEditor@@QAEHXZ
?IsOnline@@YA_NXZ
?SetBrush@MPEditor@@QAEXH@Z
?SetColor@MPEditor@@QAEXK@Z
?ShowBrush@MPEditor@@QAEX_N@Z
?ShowCursor@MPEditor@@QAEX_N@Z

Sections

.text
Size: 884KB - Virtual size: 881KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 5.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49005ded7f14ac7a2f72db1fef57110a

Headers

File Characteristics

Imports

gpigame

kernel32

user32

gdi32

advapi32

ole32

oleaut32

shlwapi

ws2_32

psapi

dbghelp

comctl32

iphlpapi

Exports

Exports

Sections

.text Size: 884KB - Virtual size: 881KB

.rdata Size: 164KB - Virtual size: 162KB

.data Size: 28KB - Virtual size: 5.8MB

.rsrc Size: 16KB - Virtual size: 14KB

.text
Size: 884KB - Virtual size: 881KB

.rdata
Size: 164KB - Virtual size: 162KB

.data
Size: 28KB - Virtual size: 5.8MB

.rsrc
Size: 16KB - Virtual size: 14KB