KingOfFighters98UM[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

KingOfFighters98UM.exe
Size

3.7MB
MD5

667f5c776cce8fde98e4e183478f2dee
SHA1

5bd78e9110f06b430481c7bee28823310fda11ea
SHA256

83121964031f58233283a6f48d55cea4b2d90966d9fe4f69cb4c75f125a4edab
SHA512

f303c60c3e1d1e3c201ba3caddb1fd4dd57652ddd522ecd1556f9d3d24fc40d006da50f838abdd3041207daaedb00e0eb0bf11ac72e27bb37e508da4e33d97b0
SSDEEP

49152:Z76X73Bw2ivXT8wTwH5vrXsa7sjdbvJCZvwcL+PBULLtPzqvbu:cwT2fojdbvJAv2PBU9zqy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
KingOfFighters98UM.exe

Files

KingOfFighters98UM.exe
.exe windows x86

Password: POP

bde7196799b00826d1e353f1a88a09f3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeBeginPeriod
timeEndPeriod

dinput8

DirectInput8Create

gdiplus

GdipBitmapUnlockBits
GdiplusStartup
GdipFree
GdipAlloc
GdipDisposeImage
GdipSaveImageToFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCloneImage
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusShutdown

d3d9

Direct3DCreate9

d3dx9_43

D3DXMatrixTranspose
D3DXMatrixRotationX
D3DXMatrixRotationY
D3DXMatrixTranslation
D3DXMatrixLookAtRH
D3DXMatrixScaling
D3DXVec4Transform
D3DXMatrixInverse
D3DXCreateTexture
D3DXGetShaderVersion
D3DXMatrixMultiply
D3DXMatrixPerspectiveFovRH
D3DXMatrixRotationAxis
D3DXMatrixRotationZ

xinput1_3

ord3
ord5
ord2

steam_api

SteamAPI_Init
SteamAPI_Shutdown
SteamAPI_UnregisterCallResult
SteamAPI_RegisterCallResult
SteamMatchmaking
SteamFriends
SteamUser
SteamUserStats
SteamUtils
SteamAPI_RunCallbacks
SteamAPI_RegisterCallback
SteamAPI_UnregisterCallback
SteamNetworking

kernel32

IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
HeapSize
SetFilePointer
GetFileType
SetHandleCount
ReadFile
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
VirtualAlloc
FatalAppExitA
VirtualFree
HeapDestroy
HeapCreate
RaiseException
GetModuleHandleA
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
MultiByteToWideChar
CloseHandle
CreateThread
Sleep
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
SetThreadAffinityMask
GetCurrentThread
GetProcessAffinityMask
GetCurrentProcess
CreateDirectoryA
GlobalUnlock
GlobalLock
GlobalAlloc
OutputDebugStringA
SetCurrentDirectoryA
GetSystemDefaultUILanguage
DebugBreak
SetEvent
CreateFileA
GetCommandLineA
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
GetProcAddress
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetStartupInfoA
GetSystemTimeAsFileTime
HeapReAlloc
DeleteFileA
HeapAlloc
HeapFree
GetLastError
RtlUnwind
SetLastError
GetCurrentThreadId
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
SetStdHandle
FlushFileBuffers
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetTimeZoneInformation
SetEndOfFile
GetProcessHeap
CompareStringA
CompareStringW
DeleteCriticalSection
SetEnvironmentVariableA

user32

ShowWindow
UpdateWindow
LoadCursorA
LoadIconA
RegisterClassA
EnableMenuItem
CreateWindowExA
GetDC
MessageBoxW
PostMessageA
InvalidateRect
BeginPaint
EndPaint
DefWindowProcA
SetWindowTextA
OpenClipboard
EmptyClipboard
ShowCursor
ReleaseDC
SetClipboardData
CloseClipboard
PeekMessageA
TranslateMessage
DispatchMessageA
KillTimer
PostQuitMessage
GetClientRect
CreateMenu
AppendMenuA
CheckMenuItem
MessageBoxA
SetFocus
SetWindowLongA
SetMenu
AdjustWindowRect
keybd_event
GetFocus
GetKeyState
SetWindowPos

gdi32

SelectObject
GetTextMetricsA
GetKerningPairsA
CreateCompatibleDC
CreateDIBSection
StretchBlt
BitBlt
GetGlyphIndicesW
DeleteObject
CreateFontIndirectW
GetGlyphOutlineW
DeleteDC

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

ole32

CoUninitialize
CoSetProxyBlanket
CoInitializeEx
CoCreateInstance
CoInitialize

oleaut32

SysAllocString
SysFreeString

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 527KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 157KB - Virtual size: 18.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 287KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bind
Size: 393KB - Virtual size: 393KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: POP

bde7196799b00826d1e353f1a88a09f3

Headers

DLL Characteristics

File Characteristics

Imports

winmm

dinput8

gdiplus

d3d9

d3dx9_43

xinput1_3

steam_api

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 527KB - Virtual size: 526KB

.data Size: 157KB - Virtual size: 18.9MB

.rsrc Size: 287KB - Virtual size: 287KB

.bind Size: 393KB - Virtual size: 393KB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 527KB - Virtual size: 526KB

.data
Size: 157KB - Virtual size: 18.9MB

.rsrc
Size: 287KB - Virtual size: 287KB

.bind
Size: 393KB - Virtual size: 393KB