Static task
static1
Behavioral task
behavioral1
Sample
ڂ̃ANV/ڂ̃ANV.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ڂ̃ANV/ڂ̃ANV.exe
Resource
win10v2004-20230220-en
General
-
Target
catmario.zip
-
Size
2.8MB
-
MD5
dbb879f282d375efe455e4a4a597e56c
-
SHA1
c5af8eb5288e4cb8d2f9b3d1083981b5d5b762a8
-
SHA256
df0d9505f6798a66bee1334d848e8b2f7d5542bdedbeb1004278e21a85b013ef
-
SHA512
4aabef09865a25c5f8777e48f41d63b82700f77c30a37a9e7a76c99251d6f3f16abccd8b32341403360b0840e6d51e821f2e09e9b44e1b10c9a72e568e14981d
-
SSDEEP
49152:H+mh16Stm17YHvISGk1kJ8UT66uyFM76SUl6we999+HTD9G1zy965ry+o0bvxYWh:e01+WHQLkM8UT9F1p6t9+zxG1mUpyZ0D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ڂ̃ANV/ڂ̃ANV.exe
Files
-
catmario.zip.zip
-
ڂ̃ANV/BGM/makaimura.mp3
-
ڂ̃ANV/BGM/puyo.mp3
-
ڂ̃ANV/BGM/spelunk.mp3
-
ڂ̃ANV/BGM/star4.mp3
-
ڂ̃ANV/BGM/titerman.mp3
-
ڂ̃ANV/SE/4-clear.mp3
-
ڂ̃ANV/SE/Pswitch.mp3
-
ڂ̃ANV/SE/allclear.mp3
-
ڂ̃ANV/SE/brockbreak.mp3
-
ڂ̃ANV/SE/brockcoin.mp3
-
ڂ̃ANV/SE/brockkinoko.mp3
-
ڂ̃ANV/SE/coin.mp3
-
ڂ̃ANV/SE/death.mp3
-
ڂ̃ANV/SE/dokan.mp3
-
ڂ̃ANV/SE/gameover.mp3
-
ڂ̃ANV/SE/gameove.mp3
-
ڂ̃ANV/SE/goal.mp3
-
ڂ̃ANV/SE/hintBlock.mp3
-
ڂ̃ANV/SE/humi.mp3
-
ڂ̃ANV/SE/jump.mp3
-
ڂ̃ANV/SE/jumpBlock.mp3
-
ڂ̃ANV/SE/kirra.mp3
-
ڂ̃ANV/SE/koura.mp3
-
ڂ̃ANV/SE/powerup.mp3
-
ڂ̃ANV/SE/tekifire.mp3
-
ڂ̃ANV/res/Thumbs.db
-
ڂ̃ANV/res/brock.PNG.png
-
ڂ̃ANV/res/brock2.PNG.png
-
ڂ̃ANV/res/haikei.PNG.png
-
ڂ̃ANV/res/item.PNG.png
-
ڂ̃ANV/res/omake.PNG.png
-
ڂ̃ANV/res/omake2.PNG.png
-
ڂ̃ANV/res/player.PNG.png
-
ڂ̃ANV/res/syobon3.PNG.png
-
ڂ̃ANV/res/teki.PNG.png
-
ڂ̃ANV/ڂ̃ANV.exe.exe windows x86
94471ae4a506f623fd7a475cb27d549a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
joyGetPosEx
joyGetDevCapsA
mciSendCommandA
timeGetTime
wsock32
accept
WSACleanup
WSAAsyncSelect
send
recv
WSAGetLastError
closesocket
imm32
ImmNotifyIME
ImmReleaseContext
ImmSetOpenStatus
ImmGetContext
ImmSetCompositionStringA
ImmGetCompositionStringA
ImmGetCandidateListA
ImmGetOpenStatus
msacm32
acmStreamOpen
acmFormatSuggest
acmStreamUnprepareHeader
acmStreamConvert
acmStreamPrepareHeader
acmStreamSize
acmStreamClose
msvcp80
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
kernel32
RaiseException
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoA
DeleteCriticalSection
CloseHandle
lstrlenA
Sleep
SetEvent
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree
GetProcAddress
LoadLibraryA
lstrcpyA
QueryPerformanceCounter
GetLocalTime
SetFilePointer
ResetEvent
WaitForSingleObject
ReadFile
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateFileA
DeleteFileA
GetTempFileNameA
GetTempPathA
InitializeCriticalSection
CreateEventA
OutputDebugStringA
WriteFile
ExitProcess
GetVersionExA
CreateThread
GetFileSize
GetModuleHandleA
ExitThread
FreeLibrary
GetOEMCP
QueryPerformanceFrequency
GlobalMemoryStatus
MultiByteToWideChar
lstrcpynA
GetLastError
WideCharToMultiByte
lstrcpyW
GetCommandLineA
GetStartupInfoA
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
VirtualAlloc
GetCPInfo
GetACP
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
UpdateWindow
ShowWindow
SetWindowRgn
GetWindowRect
SendMessageA
GetMenuItemInfoA
GetMenuItemCount
PostMessageA
ShowCursor
GetCursorPos
SetRect
GetClientRect
SetWindowPos
SetForegroundWindow
SystemParametersInfoA
AttachThreadInput
GetWindowThreadProcessId
GetForegroundWindow
LoadIconA
WINNLSEnableIME
SetMenu
SetActiveWindow
ClientToScreen
AdjustWindowRectEx
SetWindowLongA
MessageBoxA
MoveWindow
CreateWindowExA
DestroyMenu
TranslateMessage
DispatchMessageA
PeekMessageA
DefWindowProcA
DestroyWindow
RegisterClassExA
LoadCursorA
TranslateAcceleratorA
IsDialogMessageA
UnregisterClassA
UnhookWindowsHookEx
SetCursor
ReleaseDC
GetDC
PostQuitMessage
EndPaint
FillRect
BeginPaint
BringWindowToTop
GetWindowLongA
FindWindowA
GetSystemMetrics
GetKeyboardState
SetTimer
KillTimer
GetKeyState
ChangeDisplaySettingsA
GetDesktopWindow
SetWindowTextA
gdi32
CreateCompatibleBitmap
GetDIBits
BitBlt
GdiFlush
CreateFontA
StretchDIBits
GetTextMetricsA
GetGlyphOutlineA
CreateCompatibleDC
CreateDIBSection
SelectObject
SetDIBitsToDevice
DeleteDC
GetDeviceCaps
CreateSolidBrush
GetStockObject
GetObjectA
DeleteObject
shell32
DragFinish
DragQueryFileA
ole32
CoUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
ڂ̃ANV/[ǂ݁[.txt