Static task
static1
General
-
Target
Shelter.rar
-
Size
37.7MB
-
MD5
46689130b455cad162025b110d6f9f9a
-
SHA1
f4a63f5236e07374f926f7be80a0b2c5a69437bd
-
SHA256
bb8609713f9d86629e1986264e75466b919a26bf9898d3c723d4ebc3b3f5d172
-
SHA512
c99de3dedad0b4e526d81adf2b0c3903409b2c7b963cab6c488cdb1a435aa42189f64a79d0567956f8cf18d85e9c1cf10df853c8b8de9db10bb4004907d179b4
-
SSDEEP
786432:amMWqnYYRNDjmtWa/pM6lkjtj5eh8ferwxuD0QQv9SwkVk3+Wu:amHPiNDjmtde6lkjxowY0FvJkYZu
Malware Config
Signatures
Files
-
Shelter.rar.rar
-
Shelter/IGG-GAMES.COM.url.url
-
Shelter/PCGAMESTORRENTS.COM.url.url
-
Shelter/README.txt
-
Shelter/Shelter.exe.exe windows x86
eb5f8bfee74b2f608b4e421d9d1d9494
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
d3d9
Direct3DCreate9
d3dx9_43
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateFontIndirectW
dinput8
DirectInput8Create
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange
GetFileSize
ReadFile
CreateFileW
CloseHandle
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
InterlockedCompareExchange
Sleep
user32
CreateWindowExW
IsWindowEnabled
MessageBoxW
GetCursorPos
EndPaint
SetTimer
GetWindowRect
PostQuitMessage
LoadCursorW
GetClientRect
BeginPaint
TranslateMessage
ShowCursor
LoadIconW
PeekMessageW
ShowWindow
ScreenToClient
RegisterClassW
GetSystemMetrics
UpdateWindow
DefWindowProcW
MoveWindow
DispatchMessageW
wsprintfW
gdi32
GetStockObject
ole32
CoUninitialize
CoInitializeEx
CoCreateInstance
msvcp90
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
msvcr90
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_acmdln
_ismbblead
__p__fmode
__set_app_type
_XcptFilter
_exit
_cexit
__getmainargs
_crt_debugger_hook
_invoke_watson
_controlfp_s
__CxxFrameHandler3
memset
_except_handler4_common
??_V@YAXPAX@Z
sscanf_s
memcpy
strcpy_s
vsprintf_s
rand
srand
exit
fopen_s
fread
fwrite
fclose
??2@YAPAXI@Z
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
Sections
.text Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 256.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Shelter/pic/black.tad
-
Shelter/pic/cg.tad
-
Shelter/pic/collection.tad
-
Shelter/pic/cursor.tad
-
Shelter/pic/doll.tad
-
Shelter/pic/end.tad
-
Shelter/pic/frame.tad
-
Shelter/pic/gamemap.tad
-
Shelter/pic/gamemenu.tad
-
Shelter/pic/gametalk.tad
-
Shelter/pic/item.tad
-
Shelter/pic/load.tad
-
Shelter/pic/logo.tad
-
Shelter/pic/option.tad
-
Shelter/pic/stand.tad
-
Shelter/pic/title.tad
-
Shelter/sound/bgm/0.wav
-
Shelter/sound/bgm/1.wav
-
Shelter/sound/bgm/2.wav
-
Shelter/sound/se/0.wav
-
Shelter/sound/se/1.wav
-
Shelter/sound/se/2.wav
-
Shelter/sound/se/3.wav
-
Shelter/sound/se/4.wav
-
Shelter/sound/se/5.wav
-
Shelter/sound/se/6.wav
-
Shelter/sound/voice/0.wav
-
Shelter/sound/voice/1.wav
-
Shelter/sound/voice/2.wav
-
Shelter/sound/voice/3.wav
-
Shelter/sound/voice/4.wav
-
Shelter/system/save1.dat
-
Shelter/system/save2.dat
-
Shelter/system/save3.dat
-
Shelter/system/savedata.dat
-
Shelter/system/system.dat