Overview
overview
3Static
static
1Touhou 15 ...om.rar
windows7-x64
3Touhou 15 ...om.rar
windows10-2004-x64
3THBWiki ·...up.url
windows7-x64
1THBWiki ·...up.url
windows10-2004-x64
1custom.exe
windows7-x64
1custom.exe
windows10-2004-x64
1omake(utf8).txt
windows7-x64
1omake(utf8).txt
windows10-2004-x64
1omake(zh).txt
windows7-x64
1omake(zh).txt
windows10-2004-x64
1omake.txt
windows7-x64
1omake.txt
windows10-2004-x64
1readme(utf8).txt
windows7-x64
1readme(utf8).txt
windows10-2004-x64
1readme.txt
windows7-x64
1readme.txt
windows10-2004-x64
1th15.dat
windows7-x64
3th15.dat
windows10-2004-x64
3th15.exe
windows7-x64
1th15.exe
windows10-2004-x64
1thbgm.dat
windows7-x64
3thbgm.dat
windows10-2004-x64
3东方绀�...ki.url
windows7-x64
1东方绀�...ki.url
windows10-2004-x64
1喵玉殿.url
windows7-x64
1喵玉殿.url
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
Touhou 15 - Legacy of Lunatic Kingdom.rar
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Touhou 15 - Legacy of Lunatic Kingdom.rar
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
THBWiki · 专业性的东方Project中文维基百科 - TBSGroup.url
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
THBWiki · 专业性的东方Project中文维基百科 - TBSGroup.url
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
custom.exe
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
custom.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
omake(utf8).txt
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
omake(utf8).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
omake(zh).txt
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
omake(zh).txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
omake.txt
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
omake.txt
Resource
win10v2004-20230221-en
Behavioral task
behavioral13
Sample
readme(utf8).txt
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
readme(utf8).txt
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
readme.txt
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
readme.txt
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
th15.dat
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
th15.dat
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
th15.exe
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
th15.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
thbgm.dat
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
thbgm.dat
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
东方绀珠传剧情翻译(施工中) - THBWiki.url
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
东方绀珠传剧情翻译(施工中) - THBWiki.url
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
喵玉殿.url
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
喵玉殿.url
Resource
win10v2004-20230220-en
General
-
Target
Touhou 15 - Legacy of Lunatic Kingdom.rar
-
Size
417.8MB
-
MD5
08ae06e2b84b48a948f65a1eb98bd9ba
-
SHA1
d46fb8ee798ef476a895d18c23cb53fdbc672fe9
-
SHA256
cd4ef414a5f5c4d047431a3b78f3eace53c9f82bb4a6cbd96b716e4a3d78ffd4
-
SHA512
27c5aff41759abe6eb0e89d725a456d87195bf59216a8fdff3bb76a77ef769060082f6e337427c79b12de88c1ca4f017f2f7afa1196a74454ed8c59f7f3f06ad
-
SSDEEP
12582912:J168WS7Gtu24qcjCx13Kgfgs2UbKQsOztYhZzM:JoX94W1fXxfDV
Malware Config
Signatures
Files
-
Touhou 15 - Legacy of Lunatic Kingdom.rar.rar
Password: bra30
-
THBWiki · 专业性的东方Project中文维基百科 - TBSGroup.url.url
-
custom.exe.exe windows x86
Password: bra30
b705d20b2fdea482bfdb130040c92fd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
CreateFileA
GetFileSize
ReadFile
WriteFile
CloseHandle
GetLastError
LocalFree
FormatMessageA
GetUserDefaultLCID
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
HeapFree
HeapAlloc
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
DecodePointer
GetProcessHeap
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
GetModuleFileNameW
CreateDirectoryW
SetLastError
GetCurrentThreadId
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
HeapReAlloc
RtlUnwind
HeapSize
LCMapStringW
CreateFileW
user32
MessageBoxA
KillTimer
SetTimer
IsDlgButtonChecked
GetDlgItem
EndDialog
DialogBoxParamA
SendMessageA
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
omake(utf8).txt
-
omake(zh).txt
-
omake.txt
-
readme(utf8).txt
-
readme.txt
-
th15.dat
-
th15.exe.exe windows x86
Password: bra30
15ef09c54b4eb6b991b0d75501f0c487
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dinput8
DirectInput8Create
dsound
ord11
d3d9
Direct3DCreate9
d3dx9_43
D3DXVec3Normalize
D3DXLoadSurfaceFromSurface
D3DXCreateTextureFromFileInMemoryEx
D3DXLoadSurfaceFromFileInMemory
D3DXVec3Transform
D3DXMatrixRotationZ
D3DXMatrixTranslation
D3DXMatrixMultiply
D3DXMatrixRotationX
D3DXVec3Project
D3DXLoadSurfaceFromMemory
D3DXCreateTexture
D3DXMatrixPerspectiveFovLH
D3DXMatrixLookAtLH
D3DXVec2Normalize
D3DXVec3ProjectArray
D3DXMatrixRotationY
winmm
timeBeginPeriod
joyGetDevCapsA
timeGetTime
joyGetPosEx
timeEndPeriod
kernel32
SetFilePointerEx
GetConsoleMode
GetConsoleCP
HeapReAlloc
OutputDebugStringW
FreeLibrary
SetConsoleCtrlHandler
FatalAppExitA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
GetFileType
GetCPInfo
EnterCriticalSection
LeaveCriticalSection
CreateFileA
GetFileSize
CloseHandle
ReadFile
FormatMessageA
GetLastError
LocalFree
WriteFile
SetFilePointer
WaitForSingleObject
Sleep
ResumeThread
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetModuleFileNameA
CreateProcessA
GetExitCodeProcess
FindResourceA
LoadResource
LockResource
FreeResource
SizeofResource
QueryPerformanceCounter
GetConsoleTitleA
InitializeCriticalSection
GetDateFormatW
MultiByteToWideChar
GetStartupInfoA
GetProcAddress
LoadLibraryA
CreateMutexA
QueryPerformanceFrequency
DeleteCriticalSection
CreateThread
CreateEventA
GetOEMCP
GetACP
IsValidCodePage
GetTimeZoneInformation
DeleteFileW
CreateDirectoryW
CreateSemaphoreW
GetModuleHandleW
GetTickCount
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
CreateEventW
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThread
SetLastError
HeapSize
GetProcessHeap
GetModuleFileNameW
GetStdHandle
WideCharToMultiByte
AreFileApisANSI
CreateFileW
GetModuleHandleExW
ExitProcess
RtlUnwind
RaiseException
GetCommandLineA
IsProcessorFeaturePresent
IsDebuggerPresent
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetStringTypeW
SetStdHandle
WriteConsoleW
ReadConsoleW
FlushFileBuffers
GetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
EncodePointer
DecodePointer
GetCurrentThreadId
ExitThread
LoadLibraryExW
user32
ReleaseDC
GetKeyboardState
SetKeyboardState
FindWindowA
MsgWaitForMultipleObjects
PostThreadMessageA
KillTimer
SetTimer
DestroyWindow
SetCursor
CreateDialogParamA
SetForegroundWindow
SendMessageA
IsDialogMessageA
TranslateMessage
ShowCursor
SetWindowLongA
MessageBoxA
CreateWindowExA
PeekMessageA
GetDlgItem
DefWindowProcA
SetWindowPos
ShowWindow
IsDlgButtonChecked
DispatchMessageA
SystemParametersInfoA
GetSystemMetrics
LoadCursorA
WINNLSEnableIME
RegisterClassA
MoveWindow
GetWindowRect
GetDC
DrawTextA
gdi32
GetDeviceCaps
GetStockObject
TextOutA
EnumFontFamiliesExA
SetTextColor
SetBkMode
CreateCompatibleDC
CreateDIBSection
DeleteDC
SelectObject
DeleteObject
CreateFontA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
Sections
.text Size: 754KB - Virtual size: 754KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 125KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 275KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
thbgm.dat
-
东方绀珠传剧情翻译(施工中) - THBWiki.url.url
-
喵玉殿.URL.url