ATBHandlerMain
CherryInitialize
CustomGameWndProc
CustomStretchBlt
DataInitialized
F5Handler
GetFullscreenRect
HandleNameRepl
SetMoviePosition
StartupFullscreenDecision
Overview
overview
6Static
static
1OFF.English.3.0.zip
windows7-x64
1OFF.English.3.0.zip
windows10-2004-x64
1OFF Englis...RT.ini
windows7-x64
1OFF Englis...RT.ini
windows10-2004-x64
1OFF Englis...RT.ldb
windows7-x64
3OFF Englis...RT.ldb
windows10-2004-x64
3OFF Englis...RT.lmt
windows7-x64
3OFF Englis...RT.lmt
windows10-2004-x64
3OFF Englis...RT.exe
windows7-x64
1OFF Englis...RT.exe
windows10-2004-x64
1OFF Englis...01.lsd
windows7-x64
3OFF Englis...01.lsd
windows10-2004-x64
3OFF Englis...m2.wav
windows7-x64
1OFF Englis...m2.wav
windows10-2004-x64
6OFF Englis...k2.wav
windows7-x64
1OFF Englis...k2.wav
windows10-2004-x64
6OFF Englis...03.wav
windows7-x64
1OFF Englis...03.wav
windows10-2004-x64
6OFF Englis...p2.wav
windows7-x64
1OFF Englis...p2.wav
windows10-2004-x64
6OFF Englis...e2.wav
windows7-x64
1OFF Englis...e2.wav
windows10-2004-x64
6OFF Englis...e2.wav
windows7-x64
1OFF Englis...e2.wav
windows10-2004-x64
6OFF Englis...e2.wav
windows7-x64
1OFF Englis...e2.wav
windows10-2004-x64
6OFF Englis...h2.wav
windows7-x64
1OFF Englis...h2.wav
windows10-2004-x64
6OFF Englis...ee.wav
windows7-x64
1OFF Englis...ee.wav
windows10-2004-x64
6OFF Englis...m1.wav
windows7-x64
1OFF Englis...m1.wav
windows10-2004-x64
6Static task
static1
Behavioral task
behavioral1
Sample
OFF.English.3.0.zip
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
OFF.English.3.0.zip
Resource
win10v2004-20230220-en
Behavioral task
behavioral3
Sample
OFF English 3.0/RPG_RT.ini
Resource
win7-20230220-en
Behavioral task
behavioral4
Sample
OFF English 3.0/RPG_RT.ini
Resource
win10v2004-20230220-en
Behavioral task
behavioral5
Sample
OFF English 3.0/RPG_RT.ldb
Resource
win7-20230220-en
Behavioral task
behavioral6
Sample
OFF English 3.0/RPG_RT.ldb
Resource
win10v2004-20230220-en
Behavioral task
behavioral7
Sample
OFF English 3.0/RPG_RT.lmt
Resource
win7-20230220-en
Behavioral task
behavioral8
Sample
OFF English 3.0/RPG_RT.lmt
Resource
win10v2004-20230220-en
Behavioral task
behavioral9
Sample
OFF English 3.0/Sauvegarde_RPG_RT.exe
Resource
win7-20230220-en
Behavioral task
behavioral10
Sample
OFF English 3.0/Sauvegarde_RPG_RT.exe
Resource
win10v2004-20230220-en
Behavioral task
behavioral11
Sample
OFF English 3.0/Save01.lsd
Resource
win7-20230220-en
Behavioral task
behavioral12
Sample
OFF English 3.0/Save01.lsd
Resource
win10v2004-20230220-en
Behavioral task
behavioral13
Sample
OFF English 3.0/Sound/(Die) MonsterScream2.wav
Resource
win7-20230220-en
Behavioral task
behavioral14
Sample
OFF English 3.0/Sound/(Die) MonsterScream2.wav
Resource
win10v2004-20230221-en
Behavioral task
behavioral15
Sample
OFF English 3.0/Sound/00 - attack2.wav
Resource
win7-20230220-en
Behavioral task
behavioral16
Sample
OFF English 3.0/Sound/00 - attack2.wav
Resource
win10v2004-20230220-en
Behavioral task
behavioral17
Sample
OFF English 3.0/Sound/00 - bolt03.wav
Resource
win7-20230220-en
Behavioral task
behavioral18
Sample
OFF English 3.0/Sound/00 - bolt03.wav
Resource
win10v2004-20230220-en
Behavioral task
behavioral19
Sample
OFF English 3.0/Sound/00 - bump2.wav
Resource
win7-20230220-en
Behavioral task
behavioral20
Sample
OFF English 3.0/Sound/00 - bump2.wav
Resource
win10v2004-20230220-en
Behavioral task
behavioral21
Sample
OFF English 3.0/Sound/00 - choice2.wav
Resource
win7-20230220-en
Behavioral task
behavioral22
Sample
OFF English 3.0/Sound/00 - choice2.wav
Resource
win10v2004-20230220-en
Behavioral task
behavioral23
Sample
OFF English 3.0/Sound/00 - close2.wav
Resource
win7-20230220-en
Behavioral task
behavioral24
Sample
OFF English 3.0/Sound/00 - close2.wav
Resource
win10v2004-20230220-en
Behavioral task
behavioral25
Sample
OFF English 3.0/Sound/00 - failure2.wav
Resource
win7-20230220-en
Behavioral task
behavioral26
Sample
OFF English 3.0/Sound/00 - failure2.wav
Resource
win10v2004-20230220-en
Behavioral task
behavioral27
Sample
OFF English 3.0/Sound/00 - flash2.wav
Resource
win7-20230220-en
Behavioral task
behavioral28
Sample
OFF English 3.0/Sound/00 - flash2.wav
Resource
win10v2004-20230220-en
Behavioral task
behavioral29
Sample
OFF English 3.0/Sound/00 - flee.wav
Resource
win7-20230220-en
Behavioral task
behavioral30
Sample
OFF English 3.0/Sound/00 - flee.wav
Resource
win10v2004-20230220-en
Behavioral task
behavioral31
Sample
OFF English 3.0/Sound/00 - item1.wav
Resource
win7-20230220-en
Behavioral task
behavioral32
Sample
OFF English 3.0/Sound/00 - item1.wav
Resource
win10v2004-20230220-en
Target
OFF.English.3.0.zip
Size
99.2MB
MD5
b3ca48f6c867e4edbb1bbf92e1079e47
SHA1
cb60e59fe5369e6db6fad248b2340466e200db7a
SHA256
d8eb81541f45b7139ee4d024e09c18e270f8701e97f46d8c869516e518624c08
SHA512
3fdb49a6c8e1a7bf4fcc3ed5ef7dc46caf76b419e139781665a09e23ec04502d1f11d4bc8c878c06a01939af25c4f1b4ec58ce5b0e6ac943e2210eb580cb27ad
SSDEEP
3145728:YS1MoFXuYclW2ark7FqgqKJuLgW9pjpLVe:YSG82nZqp3X9DLVe
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
AddFontMemResourceEx
CreateFontA
SelectObject
SetBkColor
SetBkMode
SetStretchBltMode
SetTextColor
StretchBlt
TextOutA
Beep
CloseHandle
DeleteCriticalSection
EnterCriticalSection
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
FindResourceA
FreeResource
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameA
GetLargestConsoleWindowSize
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalLock
GlobalSize
GlobalUnlock
InitializeCriticalSection
LeaveCriticalSection
LoadResource
LockFile
LockResource
MultiByteToWideChar
PeekConsoleInputA
QueryPerformanceCounter
QueryPerformanceFrequency
ReadConsoleInputA
ScrollConsoleScreenBufferA
SetConsoleCtrlHandler
SetConsoleCursorPosition
SetConsoleMode
SetConsoleWindowInfo
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleInputA
WriteConsoleOutputA
WriteFile
__dllonexit
__doserrno
__pioinfo
__setusermatherr
_amsg_exit
_beginthreadex
_controlfp
_errno
_filelengthi64
_fileno
_get_osfhandle
_initterm
_iob
_itoa
_lock
_lseeki64
_onexit
_strdup
_stricmp
_strnicmp
_ultoa
_unlock
_write
abort
atexit
atoi
calloc
ceil
exit
fclose
feof
fflush
fgetpos
fgets
floor
fopen
fprintf
fputs
fread
free
freopen
fsetpos
fwrite
islower
isupper
log10
malloc
mbstowcs
memcpy
memmove
memset
modf
rand
realloc
remove
setlocale
setvbuf
sprintf
srand
strcmp
strlen
strncmp
strrchr
strtoul
tolower
toupper
vfprintf
wcslen
CoCreateInstance
CoInitialize
CoUninitialize
CallWindowProcA
CheckDlgButton
CloseClipboard
DialogBoxParamA
EmptyClipboard
EnableWindow
EndDialog
GetAsyncKeyState
GetClipboardData
GetDlgItem
GetForegroundWindow
GetSystemMenu
InsertMenuA
IsDlgButtonChecked
MapVirtualKeyA
MessageBoxA
OpenClipboard
SendDlgItemMessageA
SendMessageA
SetClipboardData
SetTimer
SetWindowPos
SetWindowTextA
VkKeyScanA
keybd_event
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
mixerClose
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
mixerSetControlDetails
ATBHandlerMain
CherryInitialize
CustomGameWndProc
CustomStretchBlt
DataInitialized
F5Handler
GetFullscreenRect
HandleNameRepl
SetMoviePosition
StartupFullscreenDecision
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ