GPackage
Static task
static1
Behavioral task
behavioral1
Sample
Game.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
Game.exe
Resource
win10v2004-20220812-en
General
-
Target
Game.exe
-
Size
344KB
-
MD5
b84062894c9ee8126ca2f65e881407cb
-
SHA1
28b0e54af165c1ad170d5132e4ac7ca986d06484
-
SHA256
eba64695b352b103611dc8e827e6bc44e8376e31d8cf3da0b7e11d09edc1a694
-
SHA512
6a6011dd51f4550cc66d8382a89d425c33d5db5f768d04d94c5051cd3a3ac06a97b95f133b5df2be6160d8b27906a5bdcd6267975ff8622439df4eebcb24998b
-
SSDEEP
6144:jG2KCKZEMtwUfo56aQ4whOSiKVkfPx4qev0RImfL2RXFOGLw4bW:jvKCKZEOwek6aQ44OSiKVCp4qev0Rsk
Malware Config
Signatures
Files
-
Game.exe.exe windows x86
2b002aab57b4809d1fad9951b5cd7efd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
window
?RefreshPage@WFrontEndDialog@@UAEXXZ
?OnOk@WFrontEndDialog@@UAEXXZ
?WndProc@WFrontEndPage@@UAEJIIJ@Z
?OnPaint@WFrontEndPage@@UAEXXZ
?OnClose@WFrontEndPage@@UAEXXZ
?Advance@WFrontEndDialog@@UAEXPAVWFrontEndPage@@@Z
?OnDestroy@WFrontEndPage@@UAEXXZ
?GetBackText@WFrontEndPage@@UAEPBGXZ
?GetCancelText@WFrontEndPage@@UAEPBGXZ
?GetShow@WFrontEndPage@@UAEHXZ
?OnBack@WFrontEndPage@@UAEXXZ
?OnFinish@WFrontEndPage@@UAEXXZ
?WindowMessageOpen@@3IA
?InitWindowing@@YAXXZ
??0WLog@@QAE@PBGAAPAVFArchive@@VFName@@PAVWWindow@@@Z
?GLogWindow@@3PAVWLog@@A
?OpenWindow@WLog@@QAEXHH@Z
?Unused@FCommandTarget@@UAEXXZ
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?GetPackageName@WLog@@UAEPBGXZ
?DoDestroy@WWindow@@UAEXXZ
?GetWindowClassName@WLog@@UAEXPAG@Z
?WndProc@WLog@@UAEJIIJ@Z
?CallDefaultProc@WWindow@@UAEHIIJ@Z
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?SetText@WLog@@UAEXPBG@Z
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBG0@Z
?OnSetFocus@WTerminal@@UAEXPAUHWND__@@@Z
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?SetCheck@WCheckBox@@QAEXH@Z
??0WDialog@@QAE@VFName@@HPAVWWindow@@@Z
?OnCommand@WLog@@UAEXH@Z
?OnSysCommand@WWindow@@UAEHH@Z
?OnActivate@WWindow@@UAEXH@Z
?OnChar@WWindow@@UAEXG@Z
?OnKeyDown@WWindow@@UAEXG@Z
?OnCut@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
?OnShowWindow@WLog@@UAEXH@Z
?OnUndo@WWindow@@UAEXXZ
?OnVScroll@WWindow@@UAEXIJ@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WLog@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnInitDialog@WWindow@@UAEXXZ
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
?OnTimer@WWindow@@UAEXXZ
?OnInitDialog@WDialog@@UAEXXZ
??1WCoolButton@@UAE@XZ
?OnOk@WFrontEndPage@@UAEXXZ
?OnClose@WFrontEndDialog@@UAEXXZ
?OnCreate@WWindow@@UAEXXZ
?OnPaint@WFrontEndDialog@@UAEXXZ
?OnShowWindow@WWindow@@UAEXH@Z
?OnCommand@WWindow@@UAEXH@Z
?OnSize@WWindow@@UAEXKHH@Z
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?SetText@WWindow@@UAEXPBG@Z
?CallDefaultProc@WDialog@@UAEHIIJ@Z
?WndProc@WFrontEndDialog@@UAEJIIJ@Z
??1WBitmapButton@@UAE@XZ
??1WFrontEndPage@@UAE@XZ
??1WFrontEndDialog@@UAE@XZ
??1WColorLabel@@UAE@XZ
?MaybeDestroy@WWindow@@QAEXXZ
?hInstanceWindow@@3PAUHINSTANCE__@@A
??0WBitmapButton@@QAE@PAVWWindow@@HUFDelegate@@KK@Z
??0WFrontEndPage@@QAE@PBGHPAVWFrontEndDialog@@@Z
??0WColorLabel@@QAE@PAVWWindow@@HUFDelegate@@P6GJPAUHWND__@@IIJ@ZK@Z
??0FDelegate@@QAE@PAVFCommandTarget@@P81@AEXXZ@Z
??0WFrontEndDialog@@QAE@XZ
??1WDialog@@UAE@XZ
??1WControl@@UAE@XZ
??1WLabel@@UAE@XZ
??_7WFrontEndDialog@@6B@
??1WWindow@@UAE@XZ
??_7WControl@@6B@
??_7WLabel@@6B@
??_7WColorLabel@@6B@
?SetBitmap@WBitmapButton@@QAEXPAUHBITMAP__@@@Z
?OnInitDialog@WFrontEndDialog@@UAEXXZ
?OnDestroy@WFrontEndDialog@@UAEXXZ
?OnBack@WFrontEndDialog@@UAEXXZ
?Show@WWindow@@QAEXH@Z
?OnCopyData@WLog@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?GetLength@WWindow@@UAEHXZ
??_7WFrontEndPage@@6B@
?GetCurrent@WListBox@@QAEHXZ
??1WCheckBox@@UAE@XZ
??_7WBitmapRadioButton@@6B@
??_7WCheckBox@@6B@
??_7WBitmapCheckBox@@6B@
??1WColorTrackBar@@UAE@XZ
??0WCheckBox@@QAE@XZ
??0WCheckBox@@QAE@PAVWWindow@@HUFDelegate@@@Z
??0WColorLabel@@QAE@XZ
??0WColorTrackBar@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
??_7WColorTrackBar@@6B@
??0WTrackBar@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?SetPos@WTrackBar@@QAEXH@Z
?SetRange@WTrackBar@@QAEXHH@Z
?SetTicFreq@WTrackBar@@QAEXH@Z
?GetPos@WTrackBar@@QAEHXZ
??1WTrackBar@@UAE@XZ
??_7WTrackBar@@6B@
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
?GetWindowClassName@WConfigProperties@@UAEXPAG@Z
?GetPackageName@WConfigProperties@@UAEPBGXZ
?SetValue@WProperties@@UAEXPBG@Z
?GetListItem@WPropertiesBase@@UAEPAVFTreeItem@@H@Z
?BeginSplitterDrag@WProperties@@UAEXXZ
?ForceRefresh@WProperties@@UAEXXZ
?SetItemFocus@WProperties@@UAEXH@Z
??1WConfigProperties@@UAE@XZ
??1WObjectProperties@@UAE@XZ
??1WLog@@UAE@XZ
?ScrollCaret@WEdit@@QAEXXZ
??0WObjectProperties@@QAE@VFName@@KPBGPAVWWindow@@H@Z
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WConfigProperties@@QAE@VFName@@PBG@Z
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?GetPackageName@WObjectProperties@@UAEPBGXZ
?DoDestroy@WProperties@@UAEXXZ
?GetWindowClassName@WObjectProperties@@UAEXPAG@Z
?WndProc@WWindow@@UAEJIIJ@Z
?OnSize@WProperties@@UAEXKHH@Z
?OnActivate@WProperties@@UAEXH@Z
?OnPaint@WProperties@@UAEXXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WProperties@@UAEHXZ
?OnClose@WWindow@@UAEXXZ
?OnDestroy@WProperties@@UAEXXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?GetDividerWidth@WProperties@@UAEHXZ
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnRightButtonDown@WWindow@@UAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnClose@WLog@@UAEXXZ
?OnDestroy@WLog@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?TypeChar@WTerminal@@UAEXG@Z
?Paste@WTerminal@@UAEXXZ
?WinPlaySound@@YAHPBGK@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
??_7WButton@@6B@
?LoadFileToBitmap@@YAPAUHBITMAP__@@PBGAAH1@Z
??1WButton@@UAE@XZ
??0WControl@@QAE@XZ
??_7WCoolButton@@6B@
??_7WBitmapButton@@6B@
??1WBitmapRadioButton@@UAE@XZ
?GetOkText@WFrontEndPage@@UAEPBGXZ
??1WBitmapCheckBox@@UAE@XZ
??0WBitmapRadioButton@@QAE@PAVWWindow@@HUFDelegate@@@Z
??1WListBox@@UAE@XZ
??0WBitmapCheckBox@@QAE@PAVWWindow@@HUFDelegate@@@Z
??0WControl@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
??_7FDelegate@@6B@
??_7WListBox@@6B@
?InsertString@WListBox@@QAEXHPBG@Z
?SuperProc@WListBox@@2P6GJPAUHWND__@@IIJ@ZA
?SetCurrent@WListBox@@QAEXHH@Z
?OnReleaseCapture@WWindow@@UAEXXZ
?Empty@WListBox@@QAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnSize@WTerminal@@UAEXKHH@Z
?ResizeList@WProperties@@UAEXXZ
?OnMove@WWindow@@UAEXHH@Z
?OnSetCursor@WWindow@@UAEHXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
core
?Initialized@FName@@0HA
?appRequestExit@@YAXH@Z
?GIsGuarded@@3HA
?MapObject@FArchive@@UAEHPAVUObject@@@Z
??1FString@@QAE@XZ
?AtEnd@FArchive@@UAEHXZ
?appStrcat@@YAPAGPAGPBG@Z
?appSprintf@@YAHPAGPBGZZ
?appStricmp@@YAHPBG0@Z
?GConfig@@3PAVFConfigCache@@A
?appSecondsSlow@@YA?AVFTime@@XZ
?appStrlen@@YAHPBG@Z
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@@Z
?GStat@@3UFStats@@A
?appStaticString1024@@YAPAGXZ
?Log@FOutputDevice@@QAEXPBG@Z
??8FString@@QBEHABV0@@Z
?appStrcmp@@YAHPBG0@Z
?appLoadFileToString@@YAHAAVFString@@PBGPAVFFileManager@@@Z
?appStrstr@@YAPAGPBG0@Z
?GCRCTable@@3PAKA
?appSaveStringToFile@@YAHABVFString@@PBGPAVFFileManager@@@Z
?GWindowManager@@3PAVUSubsystem@@A
?appSleep@@YAXM@Z
?ParseCommand@@YAHPAPBGPBG@Z
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@@@A
?PrivateStaticClass@UClass@@0V1@A
?ParseObject@@YAHPBG0PAVUClass@@AAPAVUObject@@PAV2@@Z
?appSqrt@@YANN@Z
?Parse@@YAHPBG0AAVFName@@@Z
?appLaunchURL@@YAXPBG0PAVFString@@@Z
??4FString@@QAEAAV0@PBG@Z
??YFString@@QAEAAV0@PBG@Z
?GSys@@3PAVUSystem@@A
??HFString@@QAE?AV0@PBG@Z
?appProcessSeconds@@YA?AVFTime@@XZ
??_7FExec@@6B@
??_7FNotifyHook@@6B@
?GExec@@3PAVFExec@@A
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBG2KPAVUPackageMap@@@Z
??0FName@@QAE@W4EName@@@Z
?Localize@@YAPBGPBG000H@Z
??0FString@@QAE@XZ
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
?NotifyExec@FNotifyHook@@UAEXPAXPBG@Z
?appStrfind@@YAPBGPBG0@Z
?appInit@@YAXPBG0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZH@Z
?GIsServer@@3HA
?GIsScriptable@@3HA
?GLazyLoad@@3HA
?appAtoi@@YAHPBG@Z
?Printf@FString@@SA?AV1@PBGZZ
?appAtof@@YAMPBG@Z
?LocalizeGeneral@@YAPBGPBDPBG1@Z
?Log@FOutputDevice@@QAEXW4EName@@PBG@Z
?Parse@@YAHPBG0AAVFString@@@Z
??HFString@@QAE?AV0@ABV0@@Z
?GIsRequestingExit@@3HA
?appPreExit@@YAXXZ
?appExit@@YAXXZ
?appFromAnsi@@YAPBGPBD@Z
?HardcodedNames@FName@@0PAUFNameEntry@@A
?TotalSize@FArchive@@UAEHXZ
?Precache@FArchive@@UAEXH@Z
??0FName@@QAE@PBGW4EFindName@@@Z
?PACKAGE_FILE_VERSION@@3HA
??_7FArchive@@6B@
??1FArchive@@UAE@XZ
?SerializeBits@FArchive@@UAEXPAXH@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
?MapName@FArchive@@UAEHPAVFName@@@Z
?GNull@@3PAVFOutputDevice@@A
?appPackage@@YAPBGXZ
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?StreamAr@FArchive@@UAEPAV1@XZ
?Flush@FArchive@@UAEXXZ
?GetError@FArchive@@UAEHXZ
?appStrchr@@YAPAGPBGH@Z
?appToAnsi@@YAPBDPBG@Z
??DFString@@QBE?AV0@PBG@Z
??0FString@@QAE@ABV0@@Z
??4FString@@QAEAAV0@ABV0@@Z
??DFString@@QBE?AV0@ABV0@@Z
??0FString@@QAE@PBG@Z
??DFString@@QBEPBGXZ
??_7FFileManager@@6B@
?Init@FFileManager@@UAEXH@Z
?GIsSlowTask@@3HA
?appGetVarArgs@@YAHPAGHAAPBG@Z
??_7FFeedbackContext@@6B@
?GIsRunning@@3HA
?GIsStarted@@3HA
?LocalizeError@@YAPBGPBG00@Z
?appGetSystemErrorMessage@@YAPBGH@Z
?StaticShutdownAfterError@UObject@@SAXXZ
?GErrorHist@@3PAGA
?appStrncpy@@YAPAGPAGPBGH@Z
?appStrncat@@YAPAGPAGPBGH@Z
??_7FOutputDeviceError@@6B@
?GIsCriticalError@@3HA
?Names@FName@@0V?$TArray@PAUFNameEntry@@@@A
?appUserDir@@YAPBGXZ
?Parse@@YAHPBG0PAGH@Z
GTimestamp
?GSecondsPerCycle@@3MA
?GFileManager@@3PAVFFileManager@@A
?appTimestamp@@YAPBGXZ
?Logf@FOutputDevice@@QAAXW4EName@@PBGZZ
?GLogHook@@3PAVFOutputDevice@@A
??_7FOutputDevice@@6B@
?appMemmove@@YAPAXPAXPBXH@Z
?GLog@@3PAVFOutputDevice@@A
?LocalizeError@@YAPBGPBDPBG1@Z
?GError@@3PAVFOutputDeviceError@@A
?Logf@FOutputDevice@@QAAXPBGZZ
?GPageSize@@3KA
??_7FMalloc@@6B@
?MemSize@FMalloc@@UAEHPAX@Z
?SetTag@FMalloc@@UAEXPBG@Z
?GetTag@FMalloc@@UAEPBGXZ
?GIsEditor@@3HA
?GDebugger@@3PAVUDebugger@@A
?GIsClient@@3HA
?ParseParam@@YAHPBG0@Z
?appUnwindf@@YAXPBGZZ
?appRandRange@@YAHHH@Z
?GMalloc@@3PAVFMalloc@@A
?appCmdLine@@YAPBGXZ
?appBaseDir@@YAPBGXZ
?winGetSizeANSI@@YAHPBG@Z
?winToANSI@@YAPADPADPBGH@Z
?winGetSizeUNICODE@@YAHPBD@Z
?winToUNICODE@@YAPAGPAGPBDH@Z
?appStrcpy@@YAPAGPAGPBG@Z
?appFailAssert@@YAXPBD0H@Z
?GUnicodeOS@@3HA
engine
?PrivateStaticClass@UEngine@@0VUClass@@A
?PrivateStaticClass@UGameEngine@@0VUClass@@A
?PrivateStaticClass@URenderDevice@@0VUClass@@A
?PrivateStaticClass@AActor@@0VUClass@@A
user32
PeekMessageA
GetForegroundWindow
GetWindowThreadProcessId
SetFocus
EnableWindow
InvalidateRect
SetForegroundWindow
SetActiveWindow
FindWindowExW
FindWindowExA
GetPropW
GetPropA
SendMessageTimeoutW
SetPropW
SetPropA
RemovePropW
RemovePropA
ShowWindow
PeekMessageW
TranslateMessage
MessageBoxW
IsWindow
PostMessageW
PostMessageA
CreateDialogParamW
CreateDialogParamA
GetDlgItem
GetSystemMetrics
SetWindowPos
SendMessageW
SendMessageA
UpdateWindow
GetMessageW
GetMessageA
DispatchMessageW
DispatchMessageA
EndDialog
kernel32
GetStartupInfoA
MoveFileA
GetCurrentThreadId
GetCurrentThread
SetThreadPriority
MultiByteToWideChar
Sleep
CreateMutexW
CreateMutexA
ExitProcess
GetCommandLineW
GetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryW
SetCurrentDirectoryA
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryW
RemoveDirectoryA
CreateDirectoryW
CreateDirectoryA
MoveFileW
GetModuleHandleA
DeleteFileW
DeleteFileA
CopyFileW
CopyFileA
WriteFile
SetFileAttributesW
SetFileAttributesA
CloseHandle
SetFilePointer
ReadFile
CreateFileW
CreateFileA
GetFileSize
GetLastError
GetSystemInfo
VirtualFree
VirtualAlloc
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetSystemDirectoryW
GetWindowsDirectoryW
GetModuleFileNameW
CreateThread
gdi32
DeleteObject
CreateSolidBrush
advapi32
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegCloseKey
shell32
ShellExecuteA
ShellExecuteW
msvcrt
__p__commode
_adjust_fdiv
__p__fmode
_initterm
__getmainargs
__setusermatherr
exit
_XcptFilter
_acmdln
?terminate@@YAXXZ
_except_handler3
_exit
__dllonexit
??1type_info@@UAE@XZ
_onexit
_CxxThrowException
_ftol
_purecall
__CxxFrameHandler
_controlfp
__set_app_type
_stat
Exports
Exports
Sections
.text Size: 204KB - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ