Warcracft III Reforged+Keygen+CD Keys[.]rar

Resubmissions

03-08-2023 07:22

230803-h7h8fsbh93 8

24-10-2022 20:50

221024-zmn2msaeen 10

Sharing

Copy URL

Twitter E-mail

General

Target

Warcracft III Reforged+Keygen+CD Keys.rar
Size

30.2MB
MD5

03bf9239a1c35ef0f6f162180499167f
SHA1

b1921d4747ed0ca08ecb31dda5b57079dcd6085d
SHA256

3c806eec38fc8565c942fe0a79331bf3215989d494bb3d5fa8d8057dcef58e03
SHA512

6cd7a438a05c940649e8202e392318905e5785a0476a10388aa62081cdca2de9d9ede2045fb6fbabd116ad7b785b10c4970d0536fea8f945c5510db27c346273
SSDEEP

786432:eQaNznirxs9+seaiiI0Ppr91OLvHh99br84AEEuDW:eQSzB9+sPiD0Pn1Uvh99brhTDW

Score

3^/10

Malware Config

Signatures

Unsigned PE 3 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack002/-warcraft-tft-keygen-F82Z5I7.exe
unpack001/Warcracft III Reforged/StarCraft-Setup.exe
unpack001/Warcracft III Reforged/Warcraft III Reforged™ Setup.exe

Files

Warcracft III Reforged+Keygen+CD Keys.rar
.rar .zip
Warcracft III Reforged/-warcraft-tft-keygen-F82Z5I7.zip
.zip
-warcraft-tft-keygen-F82Z5I7.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.............exe
.exe windows x86

86f57e806289961a1f03bcd6ad480f72

Code Sign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

07-11-2021 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04-03-2014 00:00

Not After

03-03-2024 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:fe:b5:55:70:f8:da:94:bb:c4:04:3b:09:44:6f:fe
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

29-11-2017 00:00

Not After

29-11-2019 23:59

Subject

SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Changzhi Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Changzhi Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074a696164696e67,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

Issuer

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

22-10-2014 00:00

Not After

22-10-2024 00:00

Subject

CN=DigiCert Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

10-11-2006 00:00

Not After

10-11-2021 00:00

Subject

CN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

08-11-2006 00:00

Not After

07-11-2021 23:59

Subject

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

Issuer

CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=VeriSign Trust Network+OU=(c) 2006 VeriSign\, Inc. - For authorized use only,O=VeriSign\, Inc.,C=US

Not Before

04-03-2014 00:00

Not After

03-03-2024 23:59

Subject

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

1f:fe:b5:55:70:f8:da:94:bb:c4:04:3b:09:44:6f:fe
Certificate

Issuer

CN=Symantec Class 3 Extended Validation Code Signing CA - G2,OU=Symantec Trust Network,O=Symantec Corporation,C=US

Not Before

29-11-2017 00:00

Not After

29-11-2019 23:59

Subject

SERIALNUMBER=91310114MA1GT9FP6N,CN=Shanghai Changzhi Network Technology Co.\, Ltd.,OU=IT,O=Shanghai Changzhi Network Technology Co.\, Ltd.,L=Shanghai,ST=Shanghai,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13074a696164696e67,1.3.6.1.4.1.311.60.2.1.2=#13085368616e67686169,1.3.6.1.4.1.311.60.2.1.3=#1302434e

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

Issuer

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

04-01-2017 00:00

Not After

18-01-2028 00:00

Subject

CN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

07-01-2016 12:00

Not After

07-01-2031 12:00

Subject

CN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

2a:bf:69:03:59:ac:bf:c2:71:45:2f:1c:b9:78:72:e1:7e:ac:be:4f:05:b9:76:e5:81:68:bb:40:3f:27:42:69
Signer

Actual PE Digest

2a:bf:69:03:59:ac:bf:c2:71:45:2f:1c:b9:78:72:e1:7e:ac:be:4f:05:b9:76:e5:81:68:bb:40:3f:27:42:69

Digest Algorithm

sha256

PE Digest Matches

true

56:5a:b1:32:7e:1d:9e:60:62:af:42:ec:07:77:72:54:3a:14:ba:49
Signer

Actual PE Digest

56:5a:b1:32:7e:1d:9e:60:62:af:42:ec:07:77:72:54:3a:14:ba:49

Digest Algorithm

sha1

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapDestroy
HeapReAlloc
HeapSize
SetLastError
GetLogicalDriveStringsW
GetDriveTypeW
DeviceIoControl
GetDiskFreeSpaceExW
GetVolumeInformationW
DuplicateHandle
GetFileAttributesExW
FindFirstFileExW
GetCurrentDirectoryA
WritePrivateProfileStringA
WritePrivateProfileStringW
LockResource
SizeofResource
FreeResource
LoadResource
FindResourceW
GetTickCount
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
HeapFree
HeapAlloc
GetProcessHeap
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetLocalTime
CreateMutexW
GetVersionExW
SetEndOfFile
WriteConsoleW
SetStdHandle
LCMapStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
FlushFileBuffers
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryW
GetWindowsDirectoryW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
GetStartupInfoW
Sleep
DecodePointer
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
OpenProcess
CreateProcessW
GetStdHandle
GetExitCodeProcess
SetFilePointer
WriteFile
ReadFile
GetModuleFileNameW
FindClose
DeleteFileW
FindNextFileW
FindFirstFileW
MoveFileExW
GetFileSize
GetFileSizeEx
CreateFileW
SetEvent
CloseHandle
TerminateThread
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStringTypeW
GetConsoleCP
GetFileType
ReadConsoleW
GetConsoleMode
SetFilePointerEx
UnregisterWaitEx
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
OutputDebugStringW
GetOEMCP
IsValidCodePage
GetModuleHandleExW
GetCPInfo
CreateSemaphoreW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineW
IsDebuggerPresent
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
GetProcAddress
FindResourceExW
GetLastError
WaitForSingleObject
CreateEventW
RaiseException
CreateDirectoryW
FreeLibrary
TerminateProcess
GetCurrentDirectoryW
GetSystemTimeAsFileTime
GetCurrentThread
GetACP
ExitProcess
MulDiv
GetCurrentProcessId
EncodePointer
CreateThread
ExitThread
LoadLibraryExW
RtlUnwind
CreateTimerQueue
IsProcessorFeaturePresent
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
WaitForSingleObjectEx

user32

SetWindowPos
SendMessageW
BringWindowToTop
SetForegroundWindow
ShowWindow
GetWindowLongW
GetDC
ReleaseDC
IsIconic
GetSystemMetrics
KillTimer
SetTimer
GetWindowRect
MoveWindow
MonitorFromWindow
GetMonitorInfoW
EnableWindow
ClientToScreen
GetPropW
SetPropW
FindWindowExW
wsprintfW
LoadBitmapW
RegisterClassW
LoadCursorW
EndPaint
BeginPaint
wvsprintfW
SetCursor
UnionRect
OffsetRect
GetMessageW
TranslateMessage
DispatchMessageW
CallWindowProcW
RegisterClassExW
GetClassInfoExW
IsWindow
SetFocus
GetWindow
LoadImageW
IsWindowVisible
CharNextW
GetActiveWindow
GetFocus
GetKeyState
SetCapture
ReleaseCapture
GetUpdateRect
InvalidateRect
GetCursorPos
ScreenToClient
MapWindowPoints
IntersectRect
IsRectEmpty
PtInRect
IsZoomed
SetWindowRgn
GetWindowTextW
GetWindowTextLengthW
GetCaretBlinkTime
GetCaretPos
CharPrevW
FillRect
CreateCaret
HideCaret
ShowCaret
SetCaretPos
SetRect
GetSysColor
CreateAcceleratorTableW
InvalidateRgn
GetGUIThreadInfo
GetParent
DrawTextW
GetClientRect
SetWindowTextW
PostQuitMessage
MessageBoxW
DestroyWindow
SetWindowLongW
CreateWindowExW
PostMessageW
DefWindowProcW

gdi32

CreateSolidBrush
SetBkMode
SetTextColor
CreateFontW
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
GetStockObject
GetObjectW
DeleteDC
GetDeviceCaps
CreateFontIndirectW
CreatePen
Rectangle
RestoreDC
SaveDC
GetTextMetricsW
SetWindowOrgEx
CreateRoundRectRgn
GetObjectA
CreatePatternBrush
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
LineTo
RoundRect
SelectClipRgn
ExtSelectClipRgn
SetBkColor
StretchBlt
SetStretchBltMode
CreateDIBSection
MoveToEx
TextOutW
ExtTextOutW
GdiFlush

advapi32

RegCloseKey
RegQueryValueExW
RegCreateKeyW
DuplicateTokenEx
OpenProcessToken

shell32

ord165
ShellExecuteW
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetFolderPathW

ole32

CreateStreamOnHGlobal
OleLockRunning
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoUninitialize
CoInitialize

shlwapi

PathFileExistsW
PathIsRootW
StrStrIW
StrStrIA

ws2_32

socket
setsockopt
connect
send
closesocket
shutdown
recv
gethostbyname
inet_addr
ntohs
WSAStartup

wininet

HttpSendRequestExW
InternetConnectW
InternetOpenW
InternetCloseHandle
HttpOpenRequestW
HttpSendRequestW
InternetReadFile
HttpQueryInfoW
HttpEndRequestW

psapi

EnumProcessModules
GetModuleFileNameExW

iphlpapi

GetAdaptersInfo

comctl32

_TrackMouseEvent
ord17

imm32

ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmGetVirtualKey
ImmSetCompositionWindow

oleaut32

SysFreeString
VariantClear
VariantInit
SysAllocString

gdiplus

GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipCloneBrush
GdipDeleteBrush
GdipCreateLineBrushI
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipCreateFromHDC
GdipSetCompositingQuality
GdipSetSmoothingMode
GdipSetPixelOffsetMode
GdipSetTextRenderingHint
GdipSetInterpolationMode
GdipGraphicsClear
GdipDrawImage
GdipDrawImageRectI
GdipDeleteFontFamily
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipGetFamily
GdipDrawString
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipLoadImageFromStream
GdipGetImageWidth
GdipGetImageHeight
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipDeleteGraphics

Sections

.text
Size: 823KB - Virtual size: 822KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 213KB - Virtual size: 212KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Warcracft III Reforged/BNGatewayEditor.zip
.zip
Warcracft III Reforged/CD Key.txt
Warcracft III Reforged/StarCraft-Setup-Mac.zip
.app macos
Warcracft III Reforged/StarCraft-Setup.exe
.exe windows x86

875580bdbb33eec424e10d3c2457293c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

uiautomationcore

UiaHostProviderFromHwnd
UiaReturnRawElementProvider
UiaRaiseAutomationPropertyChangedEvent
UiaRaiseAutomationEvent
UiaClientsAreListening

msimg32

AlphaBlend

rpcrt4

RpcStringFreeA
UuidToStringA
UuidCreate

ws2_32

bind
socket
freeaddrinfo
getaddrinfo
WSASetLastError
htons
WSACleanup
WSAStartup
connect
htonl
WSAGetLastError
gethostname
closesocket
shutdown
ntohl
getpeername
getsockname
getsockopt
ntohs
setsockopt
WSAIoctl
recvfrom
sendto
accept
listen
__WSAFDIsSet
select
ioctlsocket
send
recv

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

kernel32

GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
WaitForSingleObject
RtlUnwind
ExitProcess
GetModuleHandleExW
GetStdHandle
GetFileType
GetModuleFileNameA
WriteConsoleW
ExitThread
ResumeThread
WriteFile
GetACP
SetConsoleCtrlHandler
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
OutputDebugStringA
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
CreateThread
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
HeapSize
CreateFileW
SetEndOfFile
GetTickCount64
SleepEx
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
FormatMessageA
VerSetConditionMask
GetSystemDirectoryA
LoadLibraryA
VerifyVersionInfoA
CreateFileA
GetFileSizeEx
InitializeCriticalSection
GetEnvironmentVariableW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindFirstFileW
GetDiskFreeSpaceExW
GetFileAttributesW
GetFileAttributesExW
GetFileInformationByHandle
GetFileTime
GetFullPathNameW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
DeviceIoControl
MoveFileExW
AreFileApisANSI
OpenEventA
SetWaitableTimer
GetSystemInfo
CreateWaitableTimerA
DeactivateActCtx
ActivateActCtx
CreateActCtxW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SystemTimeToTzSpecificLocalTime
GetDriveTypeW
lstrlenW
VirtualUnlock
ReleaseMutex
CreateMutexA
GlobalFree
GetExitCodeProcess
OpenThread
CreateFiber
VirtualQuery
MoveFileW
ConvertThreadToFiber
CreateFiberEx
WaitNamedPipeW
SetFileValidData
IsBadReadPtr
GlobalMemoryStatus
Module32NextW
VerifyVersionInfoW
SignalObjectAndWait
CreateTimerQueue
OutputDebugStringW
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetCurrentProcessId
ResetEvent
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
SetThreadPriority
MultiByteToWideChar
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
EncodePointer
GetExitCodeThread
SwitchToThread
Sleep
WaitForSingleObjectEx
DuplicateHandle
GetCurrentThreadId
TryEnterCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
CreateEventA
GetProcessHeap
HeapAlloc
SetEvent
HeapFree
GetCurrentThread
GetCurrentProcess
GetUserDefaultLangID
CloseHandle
OpenProcess
LocalFree
SystemTimeToFileTime
GetComputerNameW
lstrcpynA
GetFileSize
GetThreadContext
GetLocalTime
LocalAlloc
GetVersionExW
GetTickCount
FreeLibrary
GetModuleHandleW
DeleteCriticalSection
GetProcAddress
DecodePointer
LoadLibraryW
RaiseException
GetLastError
InitializeCriticalSectionEx
ConvertFiberToThread
ReadConsoleA
SetConsoleMode
GetOEMCP
Module32FirstW
Process32Next
DeleteFileA
FileTimeToSystemTime
GetTempPathA
CreateToolhelp32Snapshot
SwitchToFiber
SuspendThread
IsBadStringPtrA
Thread32First
GetCompressedFileSizeW
SetFilePointer
Thread32Next
GetProcessId
DeleteFiber
GetVolumeInformationW
SetNamedPipeHandleState
Process32First
IsBadWritePtr
RtlCaptureContext
GetShortPathNameW
GetDiskFreeSpaceW

user32

AllowSetForegroundWindow
GetDesktopWindow
MessageBoxA
GetDC
DrawTextW
GetWindowLongW
DefWindowProcW
AdjustWindowRectEx
GetWindowRect
DestroyWindow
SetWindowPos
MessageBoxW
CreateWindowExW
SendMessageW
GetSystemMetrics
SetWindowTextW
RegisterClassExW
ShowWindow
DispatchMessageW
SetTimer
PeekMessageW
TrackMouseEvent
TranslateMessage
LoadIconW
LoadCursorW
SetCapture
GetWindowDC
SetWindowLongW
UpdateLayeredWindow
PostQuitMessage
ReleaseCapture
InvalidateRect
IsIconic
ReleaseDC
GetCursorPos
BeginPaint
EndPaint
GetKeyState
GetUserObjectInformationW
ClientToScreen
PostMessageW
GetForegroundWindow
GetActiveWindow
GetShellWindow
GetWindowThreadProcessId
CharLowerA
SetFocus
MoveWindow
ScreenToClient
GetProcessWindowStation

gdi32

CreateDIBSection
GetObjectW
DeleteObject
AddFontMemResourceEx
EnumFontFamiliesExW
CreateFontW
GetStockObject
SetBkColor
RoundRect
SelectObject
GetLayout
SetLayout
DeleteDC
SetTextColor
SetBkMode
SetMapMode
SetTextAlign
CreateCompatibleDC

advapi32

OpenSCManagerW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
RegQueryValueExA
RegCloseKey
RegDeleteValueA
CryptEnumProvidersA
CryptSignHashA
CryptDecrypt
CryptExportKey
CryptGetUserKey
CryptGetProvParam
CryptSetHashParam
CryptAcquireContextW
ReportEventA
RegisterEventSourceA
DeregisterEventSource
RegGetValueW
SetEntriesInAclW
ConvertSecurityDescriptorToStringSecurityDescriptorW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
GetFileSecurityW
MapGenericMask
BuildTrusteeWithSidW
RegSetValueExW
RegQueryValueExW
LookupPrivilegeValueW
AdjustTokenPrivileges
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetUserNameW
DuplicateTokenEx
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
OpenThreadToken
DuplicateToken
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
AccessCheck
AllocateAndInitializeSid

shell32

SHGetFolderPathW
ShellExecuteExA
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
CommandLineToArgvW
FindExecutableA

ole32

CoTaskMemFree
CoCreateInstance

wintrust

WinVerifyTrust

crypt32

CertOpenStore
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
CertAddCertificateContextToStore
CertGetNameStringA
CryptQueryObject
CertCreateCertificateChainEngine
CertGetCertificateChain
CertFreeCertificateChain
CryptMsgClose
CryptMsgGetParam
CertGetNameStringW
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertGetCertificateContextProperty
CertFreeCertificateChainEngine

wininet

HttpSendRequestA
InternetCloseHandle
InternetSetStatusCallbackA
InternetOpenA
InternetReadFileExA
InternetSetCookieW
InternetSetOptionA
InternetCrackUrlA
HttpOpenRequestA
HttpQueryInfoA
InternetConnectA

winhttp

WinHttpCloseHandle
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpOpen

oleaut32

VariantClear
SysAllocString
SafeArrayCreateVector
SafeArrayPutElement

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 106KB - Virtual size: 477KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 583KB - Virtual size: 583KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 158KB - Virtual size: 157KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Warcracft III Reforged/W3CDKeyGrabber.zip
.zip
Warcracft III Reforged/W3Fixer.zip
.zip
Warcracft III Reforged/WarCraft 3 Reforged Cheats.txt
Warcracft III Reforged/WarCraft3_TFT_Keygen.rar
.rar
Warcracft III Reforged/Warcraft III Reforged™ Setup.exe
.exe windows x86

d221b1dc8c3a08622f6512e7876527c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateDirectoryA
lstrcpyA
CreateFileA
GetFileAttributesA
lstrlenA
GetTempPathA
lstrcmpA
lstrcatA
ExitProcess
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetFileSize
GetLastError
CreateMutexA
GetModuleFileNameA
VirtualAlloc
VirtualFree
GetStartupInfoA

user32

MessageBoxA
wsprintfA

msvcrt

_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gentee
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Warcracft III Reforged/Warcraft III_ Reforged.zip
.zip
Warcracft III Reforged/Warcraft III_ Reforged_Activation.txt
Warcracft III Reforged/wc3_roc_tft_keychanger.zip
.zip

Resubmissions

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

CODE Size: 35KB - Virtual size: 35KB

DATA Size: 1024B - Virtual size: 584B

BSS Size: - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 2KB

.tls Size: - Virtual size: 8B

.rdata Size: 512B - Virtual size: 24B

.reloc Size: - Virtual size: 2KB

.rsrc Size: 6KB - Virtual size: 6KB

86f57e806289961a1f03bcd6ad480f72

Code Sign

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49Certificate

Extended Key Usages

Key Usages

1f:fe:b5:55:70:f8:da:94:bb:c4:04:3b:09:44:6f:feCertificate

Extended Key Usages

Key Usages

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate

Extended Key Usages

Key Usages

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate

Extended Key Usages

Key Usages

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78Certificate

Key Usages

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49Certificate

Extended Key Usages

Key Usages

1f:fe:b5:55:70:f8:da:94:bb:c4:04:3b:09:44:6f:feCertificate

Extended Key Usages

Key Usages

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate

Extended Key Usages

Key Usages

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate

Extended Key Usages

Key Usages

2a:bf:69:03:59:ac:bf:c2:71:45:2f:1c:b9:78:72:e1:7e:ac:be:4f:05:b9:76:e5:81:68:bb:40:3f:27:42:69Signer

56:5a:b1:32:7e:1d:9e:60:62:af:42:ec:07:77:72:54:3a:14:ba:49Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

ws2_32

wininet

psapi

iphlpapi

comctl32

imm32

oleaut32

gdiplus

Sections

.text Size: 823KB - Virtual size: 822KB

.rdata Size: 213KB - Virtual size: 212KB

.data Size: 21KB - Virtual size: 60KB

.rsrc Size: 2.8MB - Virtual size: 2.8MB

.reloc Size: 48KB - Virtual size: 47KB

875580bdbb33eec424e10d3c2457293c

Headers

DLL Characteristics

File Characteristics

Imports

uiautomationcore

CODE
Size: 35KB - Virtual size: 35KB

DATA
Size: 1024B - Virtual size: 584B

BSS
Size: - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 2KB

.tls
Size: - Virtual size: 8B

.rdata
Size: 512B - Virtual size: 24B

.reloc
Size: - Virtual size: 2KB

.rsrc
Size: 6KB - Virtual size: 6KB

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

1f:fe:b5:55:70:f8:da:94:bb:c4:04:3b:09:44:6f:fe
Certificate

03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66
Certificate

06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1b
Certificate

1b:09:3b:78:60:96:da:37:bb:a4:51:94:46:c8:96:78
Certificate

19:1a:32:cb:75:9c:97:b8:cf:ac:11:8d:d5:12:7f:49
Certificate

1f:fe:b5:55:70:f8:da:94:bb:c4:04:3b:09:44:6f:fe
Certificate

09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41
Certificate

0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15
Certificate

2a:bf:69:03:59:ac:bf:c2:71:45:2f:1c:b9:78:72:e1:7e:ac:be:4f:05:b9:76:e5:81:68:bb:40:3f:27:42:69
Signer

56:5a:b1:32:7e:1d:9e:60:62:af:42:ec:07:77:72:54:3a:14:ba:49
Signer

.text
Size: 823KB - Virtual size: 822KB

.rdata
Size: 213KB - Virtual size: 212KB

.data
Size: 21KB - Virtual size: 60KB

.rsrc
Size: 2.8MB - Virtual size: 2.8MB

.reloc
Size: 48KB - Virtual size: 47KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 106KB - Virtual size: 477KB

.rsrc
Size: 583KB - Virtual size: 583KB

.reloc
Size: 158KB - Virtual size: 157KB

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 4KB - Virtual size: 1KB

.gentee
Size: 92KB - Virtual size: 89KB

.rsrc
Size: 4.9MB - Virtual size: 4.9MB